CVE-2026-19891 | TRENDnet TEW-WLC100 2.05b02 IKE Phase 1 Aggressive Mode /etc/racoon.conf exchange_mode missing encryption

A vulnerability marked as problematic has been reported in TRENDnet TEW-WLC100 2.05b02. This affects an unknown function of the file /etc/racoon.conf of the component IKE Phase 1 Aggressive Mode. This manipulation of the argument exchange_mode causes missing encryption of sensitive data.

The identification of this vulnerability is CVE-2026-19891. It is possible to initiate the attack remotely. There is no exploit available.

The vendor was contacted early about this disclosure.