VulnSocial

CVE-2026-15480Disclosure

LOWCVSS 7.4 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start_httpd of the file /sbin/rc of the component Web Service. Such manipulation of the argument device_name leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor explains: "We are unable to confirm if the vulnerability exists. This item has been EOL since 2011. We will make an official announcement of possible vulnerabilities, and recommend users to switch devices." This vulnerability only affects products that are no longer supported by the maintainer.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 3 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-07-12)
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-07-11: 1Mentions · 2026-07-12: 2Technical Details · 2026-07-12: 107-1107-12
Signal classification1 categories
Disclosure
3100.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-07-111
Disclosure1
2026-07-122
Disclosure2
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-15480 A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start_httpd of the file /sbin/rc of the component Web Service. Such man… https://www.cve.org/CVERecord?id=CVE-2026-15480

    Post summary

    The text announces a newly identified vulnerability (CVE-2026-15480) in Trendnet TEW-635BRM, providing detailed technical information about the affected component and function, with no references to PoC, exploit code, active exploitation, patches, or debunking claims.

    00010669
    57.8K followersView on X
  • ADK Cyber@ADKCyber
    Disclosure

    CVE-2026-15480 (CVSS 9.0) affects Trendnet TEW-635BRM web service. Review exposure if this device is in use: https://nvd.nist.gov/vuln/detail/CVE-2026-15480 http://adkcyber.com via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/ZJlyO5TDBY

    Post summary

    The tweet announces CVE-2026-15480 with a CVSS 9.0 rating for the Trendnet TEW-635BRM, directing readers to the NVD entry; no PoC, exploit, patch, or active exploitation information is provided.

    0000070
    89 followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    A new vulnerability with increased severity was disclosed for Trendnet TEW-635BRM (CVE-2026-15480) https://vuldb.com/vuln/377787

    Post summary

    The text announces a newly disclosed vulnerability (CVE‑2026‑15480) for Trendnet TEW‑635BRM with increased severity, but provides no PoC, exploit, active exploitation evidence, patch, or technical details.

    00000108
    2.3K followersView on X

Explore more

Back to dashboard