CVE-2026-75783CWE-119CWE-121

CVE-2026-75783

Critical · published August 18, 2026

CVSS v3.1
9.6
EPSS
1%
Percentile
48.0
In the wild
Unconfirmed
What it is

A security vulnerability has been detected in TRENDnet TEW-WLC100P 12.07b01. Affected by this vulnerability is an unknown functionality of the file /sbin/netifd of the component DHCP blobmsg Handler. The manipulation leads to stack-based buffer overflow. The attack must be carried out from within the local network. The exploit has been disclosed publicly and may be used.

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
9.4 · CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
EPSS
0.00598 · 48.0th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2026-08-18T17:17Z
References (6)
https://github.com/meishigana/CVE/blob/main/team15_20260702/01_wlc100p-netifd/poc/poc-netifd-overflow.py · [email protected]https://github.com/meishigana/CVE/tree/main/team15_20260702/01_wlc100p-netifd · [email protected]https://vuldb.com/cve/CVE-2026-75783 · [email protected]https://vuldb.com/submit/877772 · [email protected]https://vuldb.com/vuln/391524 · [email protected]https://vuldb.com/vuln/391524/cti · [email protected]
EPSS history
Timeline
  • 18 AUG 12:45Z
    TRENDnet TEW-WLC100P DHCP blobmsg netifd stack-based overflow
    cvelistv5