10.0Kritik
CVE-2026-75784TRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c stack-based overflow
Açıklama
A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN_0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in stack-based buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| TRENDnet | TEW-WLC100 | 1v2.07b01 |
Kaynaklar ve yamalar
- VDB-391525 | TRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c stack-based overflow vdb-entrytechnical-description
- VDB-391525 | CTI Indicators (IOB, IOC, IOA) signature
- CVE-2026-75784 | CVE Analysis and Report third-party-advisory
- Submit #877773 | TRENDnet TEW-WLC100 TEW-WLC100 Stack-based Buffer Overflow third-party-advisory
- https://github.com/meishigana/CVE/tree/main/team15_20260702/02_wlc100-nginx
- https://github.com/meishigana/CVE/blob/main/team15_20260702/02_wlc100-nginx/poc/poc-nginx-overflow.py exploit