Summary
generated automatically from NVD dataCVE-2026-77946 affects the TRENDnet TEW-821DAP running version 2.2.01b05. The flaw is a stack-based buffer overflow in the uci_safe_get function of /cgi-bin/apply_time.cgi, part of the NTP Timezone Configuration Handler. It is triggered by manipulating the arguments system.ntp.server, system.ntp.enable_server, cameo.time.time_zone or cameo.cameo.syslog_server, and it can be launched remotely. A public exploit has been disclosed, and the flaw is rated CVSS 10.0 (CRITICAL).
NVD description
A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function uci_safe_get of the file /cgi-bin/apply_time.cgi of the component NTP Timezone Configuration Handler. Executing a manipulation of the argument system.ntp.server/system.ntp.enable_server/cameo.time.time_zone/cameo.cameo.syslog_server can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
EPSS · FIRST.org
1.0%probability of exploitation in the next 30 days
Higher than 62% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-16, recomputed daily by FIRST.org.
In-depth analysis on cveo.tech
We've published a detailed analysis of this CVE — exploitation, IOCs and mitigation.
CVSS v3.1 Score
Information
- Published
- 22 août 2026
- Updated
- 12 oct. 2026
- Status
- Deferred
- Source
- cna@vuldb.com
Weaknesses (CWE)
Similar CVEs
Other vulnerabilities of type CWE-119
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.