CVE-2026-10120: TRENDnet TEW-432BRP formSetFirewallRule stack-based overflow
A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSetFirewallRule of the file /goform/formSetFirewallRule. The manipulation of the argument firewallname results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10120?
The severity of CVE-2026-10120 is rated high with a score of 8.8.
What type of vulnerability is CVE-2026-10120?
CVE-2026-10120 is a stack-based buffer overflow vulnerability.
How do I fix CVE-2026-10120?
To fix CVE-2026-10120, update your TRENDnet TEW-432BRP router to the latest firmware version provided by the manufacturer.
Can CVE-2026-10120 be exploited remotely?
Yes, CVE-2026-10120 can be exploited remotely by manipulating the firewall_name argument.
Which device is affected by CVE-2026-10120?
CVE-2026-10120 affects the TRENDnet TEW-432BRP router with firmware version 3.10B20.