CVE-2021-20158: TRENDnet Tew-827dru Firmware

Critical severity, CVSS 9.8. EPSS: 10.9% chance of exploitation in the next 30 days.

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability. It is possible for an unauthenticated, malicous actor to force the change of the admin password due to a hidden administrative command.

Affected products

• TRENDnet Tew-827dru Firmware: version 2.08b01 only

Published 2021-12-30. Last modified 2026-06-17.