CVE-2026-75784TRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c stack-based overflow

Beschreibung

A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN_0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in stack-based buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• VDB-391525 | TRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c stack-based overflow vdb-entrytechnical-description
• VDB-391525 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-required
• CVE-2026-75784 | CVE Analysis and Report third-party-advisory
• Submit #877773 | TRENDnet TEW-WLC100 TEW-WLC100 Stack-based Buffer Overflow third-party-advisory
• https://github.com/meishigana/CVE/tree/main/team15_20260702/02_wlc100-nginx related
• https://github.com/meishigana/CVE/blob/main/team15_20260702/02_wlc100-nginx/poc/poc-nginx-overflow.py exploit