CVE-2026-76582

2.1 lowEPSS 1.8%

Low (2.1). EPSS 1.8% chance of exploitation in the next 30 days.

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation of the argument ipaddr can lead to command injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P

CVSS 3.1

7.4 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWEs: CWE-74, CWE-77
Published: 2026-08-19
Modified: 2026-08-21
Record from: the NVD, synced 2026-10-19

References

https://github.com/meishigana/CVE/tree/main/team15_20260702/06_821dap-ssi-remote-cmdi
https://vuldb.com/cve/CVE-2026-76582
https://vuldb.com/submit/877791
https://vuldb.com/vuln/393041
https://vuldb.com/vuln/393041/cti

Check your stack JSON