CVE-2026-129351 | TRENDnet TEW-657BRM 1.00.1 mini_httpd /setup.cgi sprintf out-of-bounds write

November 14, 2026 Yanac

A vulnerability categorized as very critical has been discovered in TRENDnet TEW-657BRM 1.00.1. This vulnerability affects the function sprintf of the file /setup.cgi of the component mini_httpd. Such manipulation leads to out-of-bounds write. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is documented as CVE-2026-129351. The attack can be executed remotely. Additionally, an exploit exists.

The vendor explains: “”I am not able to confirm if such vulnerability exists as the product has been EOL for more than 15 years. We will send out an announcement letting customers know.”VulDB Recent EntriesRead More