CVE-2026-10182: TRENDnet TEW-432BRP formWlanSetup command injection
A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formWlanSetup of the file /goform/formWlanSetup. Executing a manipulation of the argument enrollee can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10182?
The severity of CVE-2026-10182 is rated as medium with a score of 6.3.
How do I fix CVE-2026-10182?
To fix CVE-2026-10182, it is advised to update the TRENDnet TEW-432BRP to the latest firmware version.
What type of vulnerability is CVE-2026-10182?
CVE-2026-10182 is a command injection vulnerability.
Can CVE-2026-10182 be exploited remotely?
Yes, CVE-2026-10182 can be exploited remotely due to the nature of the vulnerability.
What components are affected by CVE-2026-10182?
The affected component in CVE-2026-10182 is the formWlanSetup function in the /goform/formWlanSetup file.