CVE-2026-5183: TRENDnet TEW-713RE addRouting sub_421494 command injection
A vulnerability was determined in TRENDnet TEW-713RE up to 1.02. The affected element is the function sub421494 of the file /goform/addRouting. Executing a manipulation of the argument dest can lead to command injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5183?
CVE-2026-5183 has been rated as a high-severity vulnerability due to its potential for command injection.
How do I fix CVE-2026-5183?
To remediate CVE-2026-5183, update the TRENDnet TEW-713RE device to a version beyond 1.02 where the vulnerability is patched.
What kind of attack does CVE-2026-5183 allow?
CVE-2026-5183 allows attackers to perform command injection attacks by manipulating the `dest` argument in the addRouting function.
Which devices are affected by CVE-2026-5183?
CVE-2026-5183 affects TRENDnet TEW-713RE devices running firmware version 1.02 and below.
Is there a workaround for CVE-2026-5183?
Currently, the recommended approach for CVE-2026-5183 is to apply firmware updates, as no alternate workarounds are documented.