CVE-2026-77988

TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection

5.1 Medium

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvram_get of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: High
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: Low

Exploit likelihood

2.40%Unchanged since Aug 23, 2026

What each source reports

CVE List Score used 5.1

TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection

Record: CVE-2026-77988
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P
CVSS 3.1: 6.6 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:R
CVSS 3.0: 6.6 MediumCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:R
CVSS 2.0: 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
Weakness: CWE-77, CWE-74
Updated: 2026-11-02

EUVDEUVD-2026-64252 5.1

Record: EUVD-2026-64252
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P
Updated: 2026-11-02

GitHub AdvisoriesGHSA-9q3j-g7jc-hfg2 2.0

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the...

Record: GHSA-9q3j-g7jc-hfg2
CVSS 4.0: 2.0 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1: 6.6 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Weakness: CWE-74
Updated: 2026-11-02

NVD 2.0

Record: CVE-2026-77988
CVSS 4.0: 2.0 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1: 6.6 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
CVSS 2.0: 5.8 MediumAV:N/AC:L/Au:M/C:P/I:P/A:P
Weakness: CWE-74, CWE-77
Updated: 2026-11-02

Affected products

trendnet tew-823dru

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-77988 is a medium vulnerability (CVSS 5.1) in Trendnet Tew-823dru, published August 22, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.40%, the 84th percentile. No source names a fixed version.