CVE-2026-7750

Totolink N300RH (version 3.2.4-B20220812) contains a buffer overflow in the POST Request Handler function setMacFilterRules (file /cgi-bin/cstecgi.cgi) triggered by manipulation of the mac_address argument. The issue is exploitable remotely, with public exploit material available. Affects the N30...

CVE-2026-7750

A vulnerability was detected in Totolink N300RH 3.2.4-B20220812. This vulnerability affects the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument macaddress results in buffer overflow. The attack may be launched...

CVE-2026-7750 Totolink N300RH POST Request cstecgi.cgi setMacFilterRules buffer overflow

A vulnerability was detected in Totolink N300RH 3.2.4-B20220812. This vulnerability affects the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument macaddress results in buffer overflow. The attack may be launched...

GHSA-3V3M-WC6V-X4X3

creationtimestamp| type| source ---|---|--- 2026-05-04 08:45:23+00:00| seen| https://bsky.app/profile/mfahlandt.bsky.social/post/3mkzbtsjhx52w 2026-05-08 20:47:09+00:00| seen| https://bsky.app/profile/kubonai.bsky.social/post/3mlem23uryx2s 2026-05-13 14:46:52+00:00| seen|...

CVE-2026-7749

Totolink N300RH version 3.2.4-B20220812 is affected. The vulnerability is in the POST Request Handler function setWanConfig (file /cgi-bin/cstecgi.cgi); manipulating the priDns argument can cause a buffer overflow. The issue can be triggered remotely, and the exploit has been publicly disclosed (...

EUVD-2026-26941

A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument priDns leads to buffer overflow. The attack may be initiated remotely. The...

CVE-2026-7748 Totolink N300RH POST Request cstecgi.cgi setUpgradeFW buffer overflow

A weakness has been identified in Totolink N300RH 3.2.4-B20220812. Affected by this issue is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Executing a manipulation of the argument FileName can lead to buffer overflow. The attack can be launched...

CVE-2026-7731

creationtimestamp| type| source ---|---|--- 2026-05-04 07:30:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkz5nwloem2p...

CVE-2026-7728

creationtimestamp| type| source ---|---|--- 2026-05-04 07:10:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkz4k4l3vs2p...

CVE-2026-7725

creationtimestamp| type| source ---|---|--- 2026-05-04 07:05:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkz4b64huq2p...

CVE-2026-7724

creationtimestamp| type| source ---|---|--- 2026-05-04 06:48:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkz3chsdaf2h...

CVE-2026-7718

A vulnerability was identified in Totolink WA300 5.2cu.7112B20190227. Impacted is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument webWlanIdx leads to command injection. The attack may be initiated remotely. The...

CVE-2026-7458

creationtimestamp| type| source ---|---|--- 2026-05-04 01:55:51+00:00| seen| https://bsky.app/profile/nulj.bsky.social/post/3mkykxipqaj2g 2026-05-06 11:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml6m5j4dsv2i 2026-05-10 23:00:14+00:00| seen|...

CVE-2026-7720

CVE-2026-7720 – Totolink WA300 : The weakness affects the POST Request Handler in /cgi-bin/cstecgi.cgi, specifically the setLanguageCfg function, where manipulating the langType argument leads to a command injection. Remote exploitation is possible and a public exploit exists. Connected sources c...

EUVD-2026-26873

A weakness has been identified in Totolink WA300 5.2cu.7112B20190227. The impacted element is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. This manipulation of the argument langType causes command injection. Remote exploitation of the attack ...

CVE-2026-7719

The CVE-2026-7719 entry describes a buffer overflow in Totolink WA300’s /cgi-bin/cstecgi.cgi loginauth handler (affected component: POST Request Handler). Specifically, manipulation of the http_host argument can overflow a buffer, enabling a remote attack. Public exploit details are indicated (ex...

CVE-2026-7719

A security flaw has been discovered in Totolink WA300 5.2cu.7112B20190227. The affected element is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument httphost results in buffer overflow. The attack may be launched...

CVE-2026-42364

creationtimestamp| type| source ---|---|--- 2026-05-04 01:19:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkyiwiqxep2n 2026-05-04 01:33:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkyjpuojny26 2026-05-04 02:40:28+00:00| seen|...

CVE-2026-42370

creationtimestamp| type| source ---|---|--- 2026-05-04 01:18:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkyivhrpyd2w 2026-05-04 01:19:58+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mkyix5seejv2 2026-05-04...

CVE-2026-42368

creationtimestamp| type| source ---|---|--- 2026-05-04 01:18:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkyitx7tgm2g 2026-05-04 02:55:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkyoc4xwdf2q 2026-05-04 10:30:27+00:00| seen|...