What is CVE-2026-10064?

CVE-2026-10064 is a medium-severity vulnerability in Trendnet Tew-432brp, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 6.3/10. Published 2026-05-29.

How severe is CVE-2026-10064?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Buffer overflow in Trendnet Tew-432brp

CVE-2026-10064

A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. This affects the function formSetPortTr of the file /goform/formSetPortTr. Performing a manipulation of the argument special_name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.

Vulnerability class: Buffer Overflow

Published 2026-05-29 · last modified 2026-07-21.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

EPSS exploit prediction

EPSS: 0.004 (31.5th percentile), scored 2026-09-29.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 31st percentile — 31.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000

Affected products

Trendnet Tew-432brp — versions 3.10B20
Trendnet Tew-432brp Firmware — versions 3.10b20

Weakness classification (CWE)

References

github.com/wudipjq/my_vuln/blob/main/TRENDnet/vuln_5/5.md (Exploit, Third Party Advisory, exploit)
vuldb.com/submit/814760 (VDB Entry, Third Party Advisory, third-party-advisory)
vuldb.com/vuln/367150 (technical-description, VDB Entry, Third Party Advisory, vdb-entry)
vuldb.com/vuln/367150/cti (signature, Permissions Required, permissions-required, VDB Entry)

Frequently asked questions

What is CVE-2026-10064?: CVE-2026-10064 is a medium-severity vulnerability in Trendnet Tew-432brp, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 6.3/10. Published 2026-05-29.
How severe is CVE-2026-10064?: Medium severity. CVSS v3 base score is 6.3 out of 10.