CVE-2026-75784: TRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c stack-based overflow
A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in stack-based buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
Which systems should be prioritized for triage?
The affected product and version identified are TRENDnet TEW-WLC100 1v2.07b01. Systems exposing its HTTP service to reachable networks are the relevant attack surface because the issue is triggered through an HTTP Server header.
What does an attacker need to exploit this issue?
An attacker can launch the attack remotely by manipulating the HTTP Server header. No privileges or user interaction are required according to the supplied severity vector, and a public exploit is available.