Description
A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN_0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in stack-based buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.
Published: 2026-08-18
Score: 10 Critical
EPSS: 1.0% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A stack-based buffer overflow was discovered in the nginx HTTP Header Handler on TRENDnet TEW-WLC100. When an attacker sends a specially crafted Server HTTP header, the FUN_0040da4c function writes beyond its stack buffer, corrupting control data. The flaw can be triggered remotely through the device’s HTTP management interface, and public exploit code is available. The vulnerability is classified as CWE-119 and CWE-121.

Affected Systems

The affected devices are TRENDnet TEW-WLC100 wireless LAN controllers running firmware 1v2.07b01. No other model or firmware version is listed as vulnerable in the available data.

Risk and Exploitability

The flaw carries a CVSS score of 10, indicating critical severity. The EPSS score is 1%, reflecting a very low but nonzero likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. If a TEW‑WLC100 device is reachable via its HTTP management interface from an external network, attackers can exploit the stack overflow, potentially gaining unauthorized control. The public availability of exploitation tools underscores the urgency of addressing this issue.

Generated by OpenCVE AI on August 21, 2026 at 16:57 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the TEW-WLC100 firmware to a version that patches the nginx stack-based buffer overflow, if TRENDnet has released one.
  • Restrict access to the device’s HTTP management interface by applying firewall rules or network segmentation, limiting connections to trusted internal networks.
  • Enable logging and monitoring of HTTP requests, specifically the Server header, and configure alerts for anomalous or repeated malformed values to detect potential exploitation attempts early.

Generated by OpenCVE AI on August 21, 2026 at 16:57 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 20 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 18 Aug 2026 14:30:00 +0000

Type Values Removed Values Added
Description A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN_0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in stack-based buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.
Title TRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c stack-based overflow
First Time appeared Trendnet
Trendnet tew-wlc100
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:a:trendnet:tew-wlc100:*:*:*:*:*:*:*:*
Vendors & Products Trendnet
Trendnet tew-wlc100
References
Metrics cvssV2_0

{'score': 10, 'vector': 'AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 10, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 10, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Trendnet Tew-wlc100
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-20T17:20:33.880Z

Reserved: 2026-08-18T06:51:23.762Z

Link: CVE-2026-75784

cve-icon Vulnrichment

Updated: 2026-08-20T15:52:25.408Z

cve-icon NVD

Status : Deferred

Published: 2026-08-18T15:17:13.857

Modified: 2026-08-20T18:16:51.340

Link: CVE-2026-75784

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-21T17:00:04Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow