CVE-2026-19891: TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption
A vulnerability was determined in TRENDnet TEW-WLC100 2.05b02. This affects an unknown function of the file /etc/racoon.conf of the component IKE Phase 1 Aggressive Mode. This manipulation of the argument exchangemode causes missing encryption of sensitive data. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is reported as difficult. The vendor was contacted early about this disclosure.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19891?
The severity of CVE-2026-19891 is rated low, with a score of 3.7.
How does CVE-2026-19891 affect TRENDnet TEW-WLC100?
CVE-2026-19891 affects the TRENDnet TEW-WLC100 by allowing missing encryption of sensitive data due to a manipulation in the IKE Phase 1 Aggressive Mode settings.
Can I exploit CVE-2026-19891 remotely?
Yes, CVE-2026-19891 can potentially be exploited remotely due to its vulnerability in the IKE Phase 1 configuration.
What steps can be taken to mitigate CVE-2026-19891?
To mitigate CVE-2026-19891, ensure proper encryption settings are configured within the racoon.conf file and apply any firmware updates from TRENDnet.
Is there any impact on data integrity due to CVE-2026-19891?
CVE-2026-19891 does not impact the integrity of the data but does pose a risk to confidentiality due to missing encryption.