CVE-2026-10159: TRENDnet TEW-432BRP formSysLog stack-based overflow
A weakness has been identified in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formSysLog of the file /goform/formSysLog. This manipulation of the argument currentpage causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Since TRENDnet TEW-432BRP (EOL since 2009) cannot be replicated or fixed by the maintainer, mitigate by isolating the affected device (TEW-432BRP) from untrusted networks and preventing remote access to it (given the vulnerability can be initiated remotely via /goform/formSysLog /goform/formSysLog formSysLog stack-based overflow).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10159?
The severity level of CVE-2026-10159 is high with a score of 8.8.
How does CVE-2026-10159 affect the TRENDnet TEW-432BRP?
CVE-2026-10159 affects the TRENDnet TEW-432BRP by allowing a remote attacker to exploit a stack-based buffer overflow in the formSysLog function.
What is the risk associated with CVE-2026-10159?
CVE-2026-10159 has a risk rating of 78, indicating significant potential for exploitation.
How can I mitigate the risk of CVE-2026-10159?
The best mitigation for CVE-2026-10159 is to update the TRENDnet TEW-432BRP firmware to a version that addresses this vulnerability.
Can CVE-2026-10159 be exploited remotely?
Yes, CVE-2026-10159 can be exploited remotely by manipulating the current_page argument in the function formSysLog.