{"id":"CVE-2026-108804","published":"2026-10-12T06:16:59.457","lastModified":"2026-10-15T16:17:37.873","description":"A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web Management Backend. The manipulation of the argument service results in os command injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor confirms: \"As this router was EOL'd in 2011, we have no way of testing if such vulnerability exists. We will notify our customers of a potential vulnerability on this product.\" This vulnerability only affects products that are no longer supported by the maintainer.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-77","CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://github.com/dacj4n/TRENDNetExploits","tags":[]},{"url":"https://github.com/dacj4n/TRENDNetExploits/tree/main/exploit","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-108804","tags":[]},{"url":"https://vuldb.com/submit/962770","tags":[]},{"url":"https://vuldb.com/vuln/416581","tags":[]},{"url":"https://vuldb.com/vuln/416581/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/dacj4n/TRENDNetExploits","tags":[]},{"url":"https://github.com/dacj4n/TRENDNetExploits/tree/main/exploit","tags":[]}],"hasPoc":true,"ai":{"summary":"A critical OS command injection vulnerability exists in TRENDnet routers due to improper input sanitization in the pigwidgeon.cgi web management backend, allowing remote attackers to execute arbitrary commands with high privileges.","exploitability":"Exploitation is straightforward with no authentication required, leveraging a remote command injection flaw that can be triggered through the service parameter in the fwrite function of pigwidgeon.cgi.","blast_radius":"The vulnerability affects all affected TRENDnet router models still connected to the internet, potentially enabling full system compromise and persistent backdoor access for attackers.","remediation":"Immediate remediation requires upgrading to firmware version 1.03B04 or later, as this is the first fixed version specifically mentioned in the vendor's advisory for these affected models.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","web","remote","command-injection"],"model":"garnet-coder","analyzedAt":"2026-10-12T08:42:40.166Z"}}