01 Record

CVE-2026-77945

TRENDnet TEW-821DAP ssi upload.cgi command injection

MediumPUBLISHEDCNA: VulDB

Base score5.3 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P

02 Description

TRENDnet TEW-821DAP ssi upload.cgi command injection

Published

2026-08-22 10:45Z1 HR AGO

Last updated

2026-08-22 10:45Z1 HR AGO

Reserved

2026-08-21

Assigning CNA

VulDB

Record state

PUBLISHED

Severity

Medium (CVSS 5.3)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P

Weaknesses

CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Class
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')Class

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

fd11d9931080a54e4441db1f214351b00c03f313ae61e0a1d472e9dac2626ad6

VendorProductVersionsPlatforms

TRENDnetTEW-821DAP2.2.01b05—

vuldb.comVDB-394174 | TRENDnet TEW-821DAP ssi upload.cgi command injectionhttps://vuldb.com/vuln/394174vdb-entrytechnical-description
vuldb.comVDB-394174 | CTI Indicators (IOB, IOC, TTP, IOA)https://vuldb.com/vuln/394174/ctisignaturepermissions-required
vuldb.comCVE-2026-77945 | CVE Analysis and Reporthttps://vuldb.com/cve/CVE-2026-77945third-party-advisory
vuldb.comSubmit #881248 | TRENDnet TEW-821DAP Wireless Access Point v2.2.01b05 Command Injectionhttps://vuldb.com/submit/881248third-party-advisory
github.comhttps://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/TEW-821DAP_ssi_Arbitrary_File_Command_Injection.mdexploit