CVE-2026-129352 | TRENDnet TEW-657BRM 1.00.1 upgrade_flash.cgi boundary stack-based overflow

November 14, 2026 Yanac

A vulnerability identified as very critical has been detected in TRENDnet TEW-657BRM 1.00.1. This issue affects some unknown processing of the file /usr/sbin/upgrade_flash.cgi. Performing a manipulation of the argument boundary results in stack-based buffer overflow.

This vulnerability is reported as CVE-2026-129352. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The vendor explains: “”I am not able to confirm if such vulnerability exists as the product has been EOL for more than 15 years. We will send out an announcement letting customers know.”VulDB Recent EntriesRead More