CVE-2026-19841CWE-266CWE-276

CVE-2026-19841

Low · published August 14, 2026

CVSS v3.1

3.1

EPSS

Percentile

21.0

In the wild

Unconfirmed

What it is

A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect default permissions. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitability is considered difficult. This vulnerability only affects products that are no longer supported by the maintainer.

The record

Technical detail

CVSS v3.1: 3.1 · LOW
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0: 2.3 · CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X
EPSS: 0.00295 · 21.0th percentile
Weaknesses: CWE-266 · Incorrect Privilege Assignment; CWE-276 · Incorrect Default Permissions
Published: 2026-08-14T21:17Z

References (5)

https://app.notion.com/p/TEW-813DRU-1-01b01-38b1f5ba98908059a7beefc2fe6dd50f?source=copy_link · [email protected]https://vuldb.com/cve/CVE-2026-19841 · [email protected]https://vuldb.com/submit/870586 · [email protected]https://vuldb.com/vuln/389978 · [email protected]https://vuldb.com/vuln/389978/cti · [email protected]

EPSS history

Timeline

14 AUG 16:30Z
TRENDNET TEW-813DRU vsftpd vsftpd.conf default permission
cvelistv5