CVE-2026-10182 | TRENDnet TEW-432BRP 3.10B20 /goform/formWlanSetup enrollee command injection (EUVD-2026-33504)

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20 and classified as critical. The impacted element is the function formWlanSetup of the file /goform/formWlanSetup. Executing a manipulation of the argument enrollee can lead to command injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is tracked as CVE-2026-10182. The attack can be launched remotely. Moreover, an exploit is present.

The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities."