CVE-2026-10122: TRENDnet TEW-432BRP formSetProtocolFilter stack-based overflow

Synopsis

A stack-based buffer overflow in the formSetProtocolFilter handler of the TRENDnet TEW-432BRP router lets an attacker overflow a fixed-size stack buffer through the protocol_name argument sent to /goform/formSetProtocolFilter. The bug is reachable over the network and requires only a low-privilege account on the device's web interface; successful exploitation corrupts the router's memory and enables arbitrary code execution, configuration tampering, or a denial of service against the device. The product has been end-of-life since 2009 and the vendor has stated it will not issue a fix, so HarborGuard tracks the advisory for any future patch availability.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the device's web management interface over the network.

• AuthenticationRequired

  A low-privilege account on the router's web interface is sufficient to invoke the vulnerable handler.

• Victim interactionNot required

  No user action is needed; the attacker sends the malicious request directly to the endpoint.

• Attack complexityDetail

  Attack complexity is low and a public exploit has been disclosed, making the bug reliable to trigger.

Blast Radius

• Executes attacker-controlled code in the context of the router's web service, typically with elevated privileges on the device.
• Reads or modifies router configuration, including firewall rules, DNS settings, and stored credentials.
• Disrupts the device by crashing the management service or rendering the router unresponsive.