CVE-2026-76583

2.1 lowEPSS 1.8%

Low (2.1). EPSS 1.8% chance of exploitation in the next 30 days.

A vulnerability was identified in TRENDnet TV-IP751WIC 11.03.03. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/admin/set_time.cgi of the component alphapd. The manipulation leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P

CVSS 3.1

7.4 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWEs: CWE-74, CWE-77
Published: 2026-08-19
Modified: 2026-08-20
Record from: the NVD, synced 2026-10-19

References

https://github.com/meishigana/CVE/blob/main/team15_20260702/07_751wic-apd-time-cmdi/poc/poc-time-injection.py
https://github.com/meishigana/CVE/tree/main/team15_20260702/07_751wic-apd-time-cmdi
https://vuldb.com/cve/CVE-2026-76583
https://vuldb.com/submit/877792
https://vuldb.com/vuln/393042

Check your stack JSON