{"metadata": {"vulnerability": "CVE-2026-109157", "count": 20, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-10-12T00:00:00Z", "date_only": false, "value": "2026-10-12T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-109157", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-12T02:00:00Z", "date_only": false, "value": "2026-10-12T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-109157", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-12T12:00:50.049Z", "date_only": false, "value": "2026-10-12T12:00:50.049Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-109157", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T14:05:55Z", "date_only": false, "value": "2026-10-12T14:05:55.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-109157", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-10-13T10:45:18.396Z", "date_only": false, "value": "2026-10-13T10:45:18.396Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-109157", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T10:45:18.396Z", "date_only": false, "value": "2026-10-13T10:45:18.396Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-109157", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T10:56:01.324Z", "date_only": false, "value": "2026-10-13T10:56:01.324616Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117433234928527540", "record": "CVE-2026-109157", "field": "creation_timestamp", "uuid": "730aee40-ca0b-466b-8eb4-ecedd01a2f89", "content": "CVE-2026-109157 TRENDnet TEW-432BRP formTcpipSetup stack-based overflow A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor confirms: \"As this router was EOL'd in 2011, we have no way of testing if such vulnerability exists. We will notify our customers of a potential vulnerability on this product.\" This vulnerability only affects products that are no longer supported by the maintainer.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109157https://vuldb.com/vuln/416890https://vuldb.com/vuln/416890/ctihttps://vuldb.com/cve/CVE-2026-109157https://vuldb.com/submit/979590https://github.com/wudipjq/my_vuln/blob/main/TRENDnet/vuln_21/21.md#TRENDnet #TEW-432BRP#CVE_2026_109157#bot", "url": "https://infosec.exchange/users/cve/statuses/117433234928527540"}, {"timestamp": "2026-10-13T11:10:05.113Z", "date_only": false, "value": "2026-10-13T11:10:05.113461Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxqvhnsnrd2x", "record": "CVE-2026-109157", "field": "creation_timestamp", "uuid": "ea12329d-c08b-48df-8661-d9f500ff9d72", "content": "CVE-2026-109157 - tew-432brp\nThe TEW-432BRP router's web configuration page can be tricked into overflowing its memory when the Name field is manipulated. This flaw lets an attacker run code on the device\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tew432brp #trendnet #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxqvhnsnrd2x"}, {"timestamp": "2026-10-13T11:17:14Z", "date_only": false, "value": "2026-10-13T11:17:14Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6VRM-8CQ2-WHH8", "record": "GHSA-6VRM-8CQ2-WHH8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T11:17:14.873Z", "date_only": false, "value": "2026-10-13T11:17:14.873", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109157", "record": "FKIE_CVE-2026-109157", "field": "published"}, {"timestamp": "2026-10-13T12:00:33.349Z", "date_only": false, "value": "2026-10-13T12:00:33.349807Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117433488678055089", "record": "cve-2026-109157", "field": "creation_timestamp", "uuid": "f8c76153-9abb-4e86-814b-879a4ffe396f", "content": "CVE-2026-109157: CRITICAL stack-based buffer overflow in TRENDnet TEW-432BRP (v3.10B20). Remote exploit possible via public code \u2014 no patch, device EOL. Mitigate by replacing hardware and isolating mgmt interfaces. https://radar.offseq.com/threat/cve-2026-109157-stack-based-buffer-overflow-in-trendnet-tew-432brp-2512bc1f1dee2f64 #OffSeq #Vulnerability #RouterSecurity", "url": "https://infosec.exchange/users/offseq/statuses/117433488678055089"}, {"timestamp": "2026-10-13T12:00:35.744Z", "date_only": false, "value": "2026-10-13T12:00:35.744174Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxqybxo3ny2j", "record": "cve-2026-109157", "field": "creation_timestamp", "uuid": "e7bdc84d-1612-40ff-beba-b23256722aca", "content": "CRITICAL vulnerability in TRENDnet TEW-432BRP (v3.10B20): stack buffer overflow (CVE-2026-109157). No patch due to EOL \u2014 replace devices and restrict remote access. Exploit code is public. https://radar.offseq.com/threat/cve-2026-109157-stack-based-buffer-overflow-in-trendnet-tew-432brp-2512bc1f1...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mxqybxo3ny2j"}, {"timestamp": "2026-10-13T12:08:13.191Z", "date_only": false, "value": "2026-10-13T12:08:13.191779Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/c4j2ebgiurhsy", "record": "CVE-2026-109157", "field": "creation_timestamp", "uuid": "213be9a3-b1e2-4ddb-a2d2-753172462c1a", "content": "CVE-2026-109157 - TRENDnet TEW-432BRP formTcpipSetup stack-based overflow\nCVE ID : CVE-2026-109157\n \n Published : 13. Oktober 2026 11:17 | 15\u00a0Minuten ago\n \n Description : A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function f...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/c4j2ebgiurhsy"}, {"timestamp": "2026-10-13T12:32:58Z", "date_only": false, "value": "2026-10-13T12:32:58Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6VRM-8CQ2-WHH8", "record": "GHSA-6VRM-8CQ2-WHH8", "field": "published"}, {"timestamp": "2026-10-13T12:32:58Z", "date_only": false, "value": "2026-10-13T12:32:58Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6VRM-8CQ2-WHH8", "record": "GHSA-6VRM-8CQ2-WHH8", "field": "modified"}, {"timestamp": "2026-10-14T13:50:00.650Z", "date_only": false, "value": "2026-10-14T13:50:00.650919Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109157", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T13:50:00.650Z", "date_only": false, "value": "2026-10-14T13:50:00.650919Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109157", "record": "FKIE_CVE-2026-109157", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T13:50:29.278Z", "date_only": false, "value": "2026-10-14T13:50:29.278Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-109157", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T13:50:29.278Z", "date_only": false, "value": "2026-10-14T13:50:29.278Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109157", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T14:17:36.947Z", "date_only": false, "value": "2026-10-14T14:17:36.947", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109157", "record": "FKIE_CVE-2026-109157", "field": "lastModified"}]}