CVE-2026-15486 | TRENDnet TEW-821DAP 1.11B03 Firmware Update /goform/tools_ddns sub_42026C hostname/username/password os command injection

A vulnerability, which was classified as critical, was found in TRENDnet TEW-821DAP 1.11B03. This affects the function sub_42026C of the file /goform/tools_ddns of the component Firmware Update Handler. Such manipulation of the argument hostname/username/password leads to os command injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is uniquely identified as CVE-2026-15486. The attack can be launched remotely. No exploit exists.

The vendor explains: “We are unable to confirm the existence of the vulnerabilities for (…) TEW-821DAP (v1.0R) as these items have been EOL. “