Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSetMACFilter of the file /goform/formSetMACFilter. The manipulation of the argument filter_name leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-30 | 1 | Disclosure1 |
| 2026-05-31 | 1 | Active Exploitation1 |
| 2026-06-03 | 1 | Exploit1 |
🚨 HIGH: CVE-2026-10119 - TRENDnet TEW-432BRP router vulnerable to stack-based buffer overflow (CVSS 8.8). Exploit public. Device EOL since 2009 - no patch available. Immediate replacement recommended. #CVE #Vulnerability #PatchNow https://t.co/Lq2XcJK1bA
Post summary
CVE‑2026‑10119 is a stack‑based buffer overflow in a TRENDnet router with a publicly available exploit, but no patch or evidence of active exploitation.
A lot of offensive activities were identified targeting TRENDnet TEW-432BRP (CVE-2026-10119) https://vuldb.com/vuln/367296/cti
Post summary
Numerous attacks have been identified against TRENDnet TEW‑432BRP devices for CVE‑2026‑10119. No patch or PoC details are provided in this brief notice.
CVE-2026-10119 A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSetMACFilter of the file /goform/formSetMACFilter. The manipul… https://www.cve.org/CVERecord?id=CVE-2026-10119
Post summary
The text announces CVE-2026-10119 in TRENDnet TEW-432BRP 3.10B20, detailing that the formSetMACFilter function in /goform/formSetMACFilter is affected, but provides no PoC, patch, or exploitation evidence.