What is CVE-2026-19841?

CVE-2026-19841 is a low-severity vulnerability in Trendnet Tew-813dru, classified under Incorrect Privilege Assignment. CVSS score: 3.1/10. Published 2026-08-14.

How severe is CVE-2026-19841?

Low severity. CVSS v3 base score is 3.1 out of 10.

Privilege escalation in Trendnet Tew-813dru

CVE-2026-19841

A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect default permissions. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitability is considered difficult. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N.

Affected products

Trendnet Tew-813dru — versions 1.01b01

Weakness classification (CWE)

References

cna@vuldb.com (vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (related)

Frequently asked questions

What is CVE-2026-19841?: CVE-2026-19841 is a low-severity vulnerability in Trendnet Tew-813dru, classified under Incorrect Privilege Assignment. CVSS score: 3.1/10. Published 2026-08-14.
How severe is CVE-2026-19841?: Low severity. CVSS v3 base score is 3.1 out of 10.