CVE-2026-77946Disclosure

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function uci_safe_get of the file /cgi-bin/apply_time.cgi of the component NTP Timezone Configuration Handler. Executing a manipulation of the argument system.ntp.server/system.ntp.enable_server/cameo.time.time_zone/cameo.cameo.syslog_server can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
3 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 2 classified signals
Peaked 2d ago at 1 mentions (2026-08-22); latest day: 1
3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d

Signal classification2 categories

Disclosure

266.7%

Patch

133.3%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-08-22	1	Disclosure1
2026-08-23	1	Patch1
2026-08-28	1	Disclosure1

Full discourse3 posts

SecAlerts@SecAlertsCo40d
Disclosure
📡 TRENDnet TEW-821DAP hit by CVE-2026-77946 — critical 9.3 stack overflow in uci_safe_get via apply_time.cgi. No auth, no interaction, full compromise possible. Check your NTP Timezone config exposure now. #cybersecurity #ciso #vulnerabilities #msp https://secalerts.co/vulnerability/CVE-2026-77946?utm_campaign=x https://t.co/9iu0LWuDFb
Post summary
The tweet announces a critical stack overflow CVE‑2026‑77946 for TRENDnet TEW‑821DAP, providing technical details but no PoC, exploit code, or patch information.
0000079
882 followersView on X
Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters45d
Patch
CVE-2026-77946 - Critical stack buffer overflow in TRENDnet TEW-821DAP NTP handler. Remote exploit public, unpatched. CVSS 10. Isolate/disable affected devices until patch. #CVE #TRENDnet #infosec https://www.valtersit.com/cve/CVE-2026-77946 #CVE #CVEAlert #infosec #SysAdmin #cybersecurity #Linux #devsecops #devops #developer #sysadmin #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #ethicalhacking #cybersecurityawareness #cybersecurity #cybersecuritynews #cybersecuritytips #python #hacker #linux #kali #ubuntu #debian #ukraine #spain #ireland #unitedkingdom #canada #finland #estonia #lithuania #ireland #hungary #denmark #norway #malta #mexico #switczerland #iceland #israel
Post summary
The post details a critical stack buffer overflow (CVE-2026-77946) affecting TRENDnet NTP handlers, notes a publicly available remote exploit, and urges isolation or disabling of affected devices until a vendor patch is released.
0000054
1.0K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds46d
Disclosure
CVE-2026-77946 Stack-Based Buffer Overflow in TRENDnet TEW-821DAP NTP Timezone Configur... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-77946 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The tweet announces a stack‑based buffer overflow vulnerability (CVE‑2026‑77946) in the TRENDnet TEW‑821DAP device, providing a link to a vulnerability alert but not detailing a PoC, exploit, or patch.
00000109
4.1K followersView on X

Explore more

Back to dashboard