CVE-2026-76582: TRENDnet TEW-821DAP ssi ping.cgi system command injection

Severity: high (CVSS 7.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-19 · updated 2026-08-21
Weakness: CWE-74

Description

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation of the argument ipaddr can lead to command injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

TRENDnet TEW-821DAP: 2.2.01b05

References

https://github.com/meishigana/CVE/tree/main/team15_20260702/06_821dap-ssi-remote-cmdi
https://vuldb.com/cve/CVE-2026-76582
https://vuldb.com/submit/877791
https://vuldb.com/vuln/393041
https://vuldb.com/vuln/393041/cti

Get alerted when CVE-2026-76582 or the next vulnerability affects your stack