CVE-2026-10161 affects TRENDnet TEW-432BRP router version 3.10B20, involving a stack-based buffer overflow in the formResetStatistic function. The vulnerability can be exploited remotely by manipulating the status_statistic argument in /goform/formResetStatistic. The exploit is publicly available and the attack can be initiated remotely. The vendor has declared the product end-of-life since 2009 and will not provide fixes. This vulnerability only affects unsupported legacy network equipment.