CVE-2026-10160

HighCVSS 8.8/10Last modified Jul 22, 2026

Description

A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Affected by this issue is the function formSetEnableWizard of the file /goform/formSetEnableWizard. Such manipulation of the argument start_wizard leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119 CWE-121

Affected software

No affected versions have been published.

Timeline

Published: May 31, 2026
Last modified: Jul 22, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-1016003.6Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). Supported versions that are affected are 26.1-26.1.1.3.0. D CVE-2026-1016015.5Vulnerability in Oracle GoldenGate (component: Vendor Access Module). Supported versions that are affected are 21.3-21.23. Easily exploitab CVE-2026-1016028.0Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage CVE-2026-1016037.5Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported v CVE-2026-1016047.5Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported v CVE-2026-1016055.3Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). Supporte CVE-2026-1016066.5Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Support CVE-2026-1016074.9Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affect CVE-2026-1016086.5Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affect CVE-2026-1016094.4Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQ CVE-2026-101618.8A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. This affects the function formResetStatistic of the file /goform/formResetStati CVE-2026-1016104.9Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affect