CVE-2026-19830: TRENDnet TEW-816DRM bftpd bftpd.conf allocation of resources

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-14 · updated 2026-08-14
Weakness: CWE-400

Description

A vulnerability was found in TRENDnet TEW-816DRM GURNC4.OT182B-C-TN-R1B028-US.EN. This impacts an unknown function of the file /etc/bftpd.conf of the component bftpd. The manipulation of the argument USERLIMIT_GLOBAL results in allocation of resources. It is possible to launch the attack remotely. This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

TRENDnet TEW-816DRM: GURNC4.OT182B-C-TN-R1B028-US.EN

References

https://app.notion.com/p/TEW-816DRM-GURNC4-OT182B-C-TN-R1B028-US-EN-2018-05-16-38b1f5ba989080759a1ee701542f1935?source=copy_link
https://vuldb.com/cve/CVE-2026-19830
https://vuldb.com/submit/870259
https://vuldb.com/vuln/389971
https://vuldb.com/vuln/389971/cti
https://app.notion.com/p/TEW-816DRM-GURNC4-OT182B-C-TN-R1B028-US-EN-2018-05-16-38b1f5ba989080759a1ee701542f1935?source=copy_link

Get alerted when CVE-2026-19830 or the next vulnerability affects your stack