CVE-2026-19830CWE-400CWE-770denial-of-service

CVE-2026-19830

Medium · published August 14, 2026

CVSS v3.1
5.3
EPSS
1%
Percentile
49.9
In the wild
Unconfirmed
What it is

A vulnerability was found in TRENDnet TEW-816DRM GURNC4.OT182B-C-TN-R1B028-US.EN. This impacts an unknown function of the file /etc/bftpd.conf of the component bftpd. The manipulation of the argument USERLIMIT_GLOBAL results in allocation of resources. It is possible to launch the attack remotely. This vulnerability only affects products that are no longer supported by the maintainer.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
6.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00637 · 49.9th percentile
Weaknesses
CWE-400 · Uncontrolled Resource Consumption; CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-08-14T18:16Z
References (6)
EPSS history
Timeline
  • 14 AUG 14:00Z
    TRENDnet TEW-816DRM bftpd bftpd.conf allocation of resources
    cvelistv5