Which versions of N300rh Firmware are affected by CVE-2026-3696?

A high-severity vulnerability in Totolink N300RH wireless routers allows remote attackers to execute arbitrary code through the WiFi WPS configuration function.

Is there a public PoC exploit available for CVE-2026-3696?

Yes, a public proof-of-concept exploit is available for CVE-2026-3696. Prioritise patching immediately. EPSS: 1.4%.

How to fix or mitigate CVE-2026-3696?

Within 24 hours: Identify all Totolik N300RH devices in your network and isolate them from critical systems; disable WPS functionality if possible and restrict administrative access to the device. Within 7 days: Implement network segmentation to limit router exposure and deploy intrusion detection signatures for CVE-2026-3696 exploitation attempts. Within 30 days: Develop a device replacement plan for Totolink N300RH routers and migrate to vendor-supported alternative equipment with active security updates.

N300rh Firmware CVE-2026-3696

Q: What is the CVSS score of CVE-2026-3696?

CVE-2026-3696 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 1.4%.

MEDIUM

Command Injection (CWE-77)

2026-03-08 cna@vuldb.com

Command Injection N300rh Firmware

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

HIGH MEDIUM

CVSS changed

Apr 29, 2026 - 01:11 NVD

7.3 (HIGH) 5.5 (MEDIUM)

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

PoC Detected

Mar 10, 2026 - 18:57 vuln.today

Public exploit code

CVE Published

Mar 08, 2026 - 01:15 nvd

HIGH 7.3

DescriptionCVE.org

A vulnerability was found in Totolink N300RH 6..1c.1353_B20190305. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation results in os command injection. The attack can be initiated remotely. The exploit has been made public and could be used.

AnalysisAI

OS command injection in Totolink N300RH firmware allows unauthenticated remote attackers to execute arbitrary commands through the setWiFiWpsConfig function in the CGI handler. Public exploit code exists for this vulnerability, and no patch is currently available. Affected users should restrict network access to the device's management interface until a fix is released.

Technical ContextAI

Classified as CWE-77 (Command Injection). Affects N300Rh Firmware. A vulnerability was found in Totolink N300RH 6..1c.1353_B20190305. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation results in os command injection. The attack can be initiated remotely. The exploit has been made public and could be used.