https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-10064.htmlhttps://patchthecve.com/cve/CVE-2026-10064.htmlTue, 21 Jul 2026 15:10:00 +0000MEDIUM 6.3: A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. This affects the function formSetPortTr of the file /goform/formSetPortTr. Performing a manipulation of the argument special_name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit hahttps://patchthecve.com/cve/CVE-2026-10063.htmlhttps://patchthecve.com/cve/CVE-2026-10063.htmlTue, 21 Jul 2026 12:10:00 +0000HIGH 8.8: A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20. Affected by this issue is the function formWPS of the file /goform/formWPS. Such manipulation of the argument peerPin leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and mihttps://patchthecve.com/cve/CVE-2026-10062.htmlhttps://patchthecve.com/cve/CVE-2026-10062.htmlTue, 21 Jul 2026 12:10:00 +0000HIGH 8.8: A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formSetRoute of the file /goform/formSetRoute. This manipulation of the argument ip/mask/gateway causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exhttps://patchthecve.com/cve/CVE-2026-10061.htmlhttps://patchthecve.com/cve/CVE-2026-10061.htmlTue, 21 Jul 2026 12:10:00 +0000MEDIUM 6.3: A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected is the function formWPS of the file /goform/formWPS. The manipulation of the argument peerPin results in command injection. The attack can be executed remotely. The exploit has been made public and could be used. The vendor explains:https://patchthecve.com/cve/CVE-2026-10060.htmlhttps://patchthecve.com/cve/CVE-2026-10060.htmlTue, 21 Jul 2026 12:10:00 +0000MEDIUM 6.3: A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. This impacts the function formSetRoute of the file /goform/formSetRoute. The manipulation of the argument ip/mask/gateway leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the pu