A stack-based buffer overflow vulnerability (CVE-2026-10181) was discovered in TRENDnet TEW-432BRP router firmware version 3.10B20. The vulnerability affects the formSysCmd function in /goform/formSysCmd and can be exploited remotely by manipulating the submit-url argument. The exploit has been made public and could be actively used. The vendor has stated they will not fix the vulnerability as the product has been end-of-life since 2009, leaving affected systems permanently vulnerable.