OS Command Injection Vulnerability in TRENDnet Routers

CVE-2026-108804

What is CVE-2026-108804?

A security issue has been identified in several TRENDnet router models, including TEW-751DR, TEW-752DRU, and TEW733GR, involving the Web Management Backend. The issue arises from improper handling of input parameters in the 'fwrite' function of the 'pigwidgeon.cgi' file, which may allow an attacker to execute arbitrary operating system commands remotely. This vulnerability is particularly concerning as the affected devices reached their end of life in 2011, with no ongoing support or updates available from the vendor. Users of these devices should be aware of potential risks and consider mitigating actions.

References