PatchTheCVE: tew-929dru firmwarehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-25429: Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the r_name variablhttps://patchthecve.com/cve/CVE-2025-25429.htmlhttps://patchthecve.com/cve/CVE-2025-25429.htmlWed, 17 Jun 2026 09:00:45 +0000MEDIUM 4.8: Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the r_name variable inside the have_same_name function on the /addschedule.htm page.CVE-2025-25428: TRENDnet TEW-929DRU 1.0.0.10 was discovered to contain a hardcoded password vulnerability in /etc/shadow, whichttps://patchthecve.com/cve/CVE-2025-25428.htmlhttps://patchthecve.com/cve/CVE-2025-25428.htmlWed, 17 Jun 2026 09:00:45 +0000HIGH 8.0: TRENDnet TEW-929DRU 1.0.0.10 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.CVE-2025-25431: Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the The ssid key ohttps://patchthecve.com/cve/CVE-2025-25431.htmlhttps://patchthecve.com/cve/CVE-2025-25431.htmlWed, 17 Jun 2026 09:00:46 +0000MEDIUM 4.8: Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the The ssid key of wifi_data parameter on the /captive_portal.htm page.CVE-2025-25430: Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the configname parhttps://patchthecve.com/cve/CVE-2025-25430.htmlhttps://patchthecve.com/cve/CVE-2025-25430.htmlWed, 17 Jun 2026 09:00:45 +0000MEDIUM 4.8: Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the configname parameter on the /cbi_addcert.htm page.