CVE-2026-10182Disclosure

LOWCVSS 2.1 · LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formWlanSetup of the file /goform/formWlanSetup. Executing a manipulation of the argument enrollee can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-74CWE-77

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-05-31); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-05-31: 2Mentions · 2026-10-13: 1Technical Details · 2026-05-31: 205-3110-13
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets4 URLs
Full discourse3 posts
  • ET Labs@ET_Labs

    19 new OPEN, 39 new PRO (19 + 20) CraftCMS (CVE-2026-44011), GitLab (CVE-2026-85706), Ivanti (CVE-2026-104935), MasqradFix, NetSupport RAT, TA569, Tenda (CVE-2026-9389), TRENDnet (CVE-2026-109157, CVE-2026-10182, CVE-2026-10183), TryNodeRAT, XWorm https://community.emergingthreats.net/t/ruleset-update-summary-2026-10-13-v11310/3479

    03020291
    5.7K followersView on X
  • CVE@CVEnew
    General

    CVE-2026-10182 A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formWlanSetup of the file /goform/formWlanSetup. Executing a manip… https://www.cve.org/CVERecord?id=CVE-2026-10182

    Post summary

    A new CVE (CVE‑2026‑10182) has been disclosed for the formWlanSetup function in the TRENDnet TEW‑432BRP firmware, but the snippet provides no PoC, exploit, patch, or evidence of active exploitation.

    00000192
    57.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-10182 Remote Command Injection in TRENDnet TEW-432BRP 3.10B20 formWlanS... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-10182 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    Vulnerability alert for CVE-2026-10182: a remote command injection flaw in TRENDnet TEW-432BRP firmware, with no PoC, exploitation, patches, or false positive claims.

    0000055
    4.0K followersView on X

Explore more