Medium severity · published Aug 22, 2026
CVE-2026-77988
TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection
6.6
CVSS
2.4%
EPSS
No
On KEV
Description
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvram_get of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TE
TEW-823DRU · TRENDnet
1.1.02b01 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-77988
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-77988
github.com
https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/TEW-823DRU_bin_cli_NVRAM_Command_Injection.md
vuldb.com
https://vuldb.com/cve/CVE-2026-77988
vuldb.com
https://vuldb.com/submit/881256
vuldb.com
https://vuldb.com/vuln/394178
vuldb.com
https://vuldb.com/vuln/394178/cti
More from TEW-823DRU
9.9
CVE-2026-75976
TRENDnet TEW-823DRU NVRAM wan.cgi strcpy stack-based overflow
7.4
CVE-2026-75984
TRENDnet TEW-823DRU admin.cgi command injection