Description
A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the function log_email_server of the file /cgi-bin/email.cgi of the component ssi. Performing a manipulation results in command injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
TRENDnet TEW-755AP
20260702affected
References
- https://vuldb.com/vuln/393088 ↗
- https://vuldb.com/vuln/393088/cti ↗
- https://vuldb.com/cve/CVE-2026-76591 ↗
- https://vuldb.com/submit/877853 ↗
- https://github.com/meishigana/CVE/tree/main/team15_20260702/14_755ap-ssi-cmdi ↗
- https://github.com/meishigana/CVE/blob/main/team15_20260702/14_755ap-ssi-cmdi/poc/poc-ssi-injection.py ↗