CVE-2026-15487 | TRENDnet TEW-821DAP 1.11B03 Firmware Update /goform/system_ntp sub_41FBD0 Hostname os command injection

A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03 and classified as critical. This impacts the function sub_41FBD0 of the file /goform/system_ntp of the component Firmware Update Handler. Performing a manipulation of the argument Hostname results in os command injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability was named CVE-2026-15487. The attack may be initiated remotely. There is no available exploit.

The vendor explains: “We are unable to confirm the existence of the vulnerabilities for (…) TEW-821DAP (v1.0R) as these items have been EOL. “