High severity · published Jul 12, 2026
CVE-2026-15480
Trendnet TEW-635BRM Web Service rc start_httpd stack-based overflow
8.8
CVSS
0.8%
EPSS
No
On KEV
Description
A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start_httpd of the file /sbin/rc of the component Web Service. Such manipulation of the argument device_name leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor explains: "We are unable to confirm if the vulnerability exists. This item has been EOL since 2011. We will make an official announcement of possible vulnerabilities, and recommend users to switch devices." This vulnerability only affects products that are no longer supported by the maintainer.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TE
TEW-635BRM · Trendnet
1.00.03 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-15480
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-15480
github.com
https://github.com/glkfc/IoT-Vulnerability/blob/main/TRENDnet/TRENDnet_TEW635BRM_device_name_BOF_EN.md
vuldb.com
https://vuldb.com/cve/CVE-2026-15480
vuldb.com
https://vuldb.com/submit/838236
vuldb.com
https://vuldb.com/vuln/377787
vuldb.com
https://vuldb.com/vuln/377787/cti
More from TEW-635BRM
8.8
CVE-2026-15481
Trendnet TEW-635BRM IPoA WAN Connection Setup rc ipoa_test command injection
