CVE-2026-7611: trendnet tew-821dap_firmware

Vulnerability summary

CVE-2026-7611 is a high (CVSS 8.1) vulnerability in trendnet tew-821dap_firmware. EPSS estimates a 0.31% chance of exploitation in the next 30 days, higher than 22.5% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 02-05-2026
   PublishedVulnerability first disclosed.
2. 04-05-2026
   Last modifiedVulnerability information updated.

Description

A vulnerability was found in TRENDnet TEW-821DAP up to 1.12B01. This impacts the function platform_do_upgrade_cameo_dev of the file cameo_dev.sh of the component Firmware Update Handler. Performing a manipulation results in insufficient verification of data authenticity. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is said to be difficult. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-345Insufficient Verification of Data AuthenticityThe product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.