Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSysCmd of the file /goform/formSysCmd. Such manipulation of the argument sysCmd leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-10180 A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSysCmd of the file /goform/formSysCmd. Such manipulation of the argument s… https://www.cve.org/CVERecord?id=CVE-2026-10180
Post summary
A new vulnerability (CVE-2026-10180) affecting the formSysCmd function in TRENDnet TEW-432BRP is reported, but no proof‑of‑concept, exploit, or patch details are provided.
CVE-2026-10180 Command Injection in TRENDnet TEW-432BRP 3.10B20 formSysCmd Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-10180
Post summary
The entry announces CVE-2026-10180 as a command injection flaw in TRENDnet TEW‑432BRP’s formSysCmd function, providing only basic vulnerability details without indicating exploitation, patches, or false‑positive claims.