PatchSiren cyber security CVE debrief
CVE-2026-10183 TRENDnet CVE debrief
A stack-based buffer overflow vulnerability exists in the TRENDnet TEW-432BRP wireless router firmware version 3.10B20. The vulnerability resides in the formWlanSetup function within the /goform/formWlanSetup endpoint, where the enrollee parameter can be manipulated to trigger memory corruption. The attack vector is network-based and requires authentication (low privileges), with no user interaction needed. The vendor has explicitly stated this product reached end-of-life in 2009 (15 years ago) and will not receive patches. Public exploit availability increases practical risk for any remaining deployed units.
- Vendor
- TRENDnet
- Product
- TEW-432BRP
- CVSS
- HIGH 7.4
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-05-31
- Original CVE updated
- 2026-05-31
- Advisory published
- 2026-05-31
- Advisory updated
- 2026-05-31
Who should care
Organizations with legacy network infrastructure, SOHO environments, industrial control systems with long hardware lifecycles, and any entity conducting asset inventory or vulnerability management for wireless access points.
Technical summary
The formWlanSetup function in /goform/formWlanSetup of TRENDnet TEW-432BRP firmware 3.10B20 fails to properly validate the length of the enrollee parameter, resulting in a stack-based buffer overflow (CWE-121). A remote attacker with low-privilege credentials can send a crafted HTTP request to this endpoint to overwrite stack memory. The CVSS 4.0 score of 7.4 (HIGH) reflects network exploitability with low complexity, no user interaction, and high impact across confidentiality, integrity, and availability dimensions. The product has been end-of-life since 2009 with no remediation path from the vendor.
Defensive priority
critical
Recommended defensive actions
- Immediately inventory all TRENDnet TEW-432BRP devices and remove from production networks
- Block or restrict access to /goform/formWlanSetup endpoint at network perimeter if device removal is not immediately feasible
- Replace affected devices with actively supported wireless routers from any maintained vendor
- Monitor network traffic for anomalous requests to /goform/formWlanSetup containing oversized enrollee values
- Segment any remaining EOL devices into isolated network zones with no access to sensitive resources
- Review wireless network logs for unauthorized associations or configuration changes indicative of compromise
Evidence notes
Vulnerability disclosed via VulDB with NVD record. CVSS 4.0 vector confirms network attack vector, low attack complexity, low privilege requirements, and high impacts to confidentiality, integrity, and availability. Vendor EOL statement explicitly acknowledges no fix possible. Public exploit reference present in source metadata.
Official resources
2026-05-31