Skip to main content

Totolink N300RH CVE-2026-7749

| EUVD-2026-26941 HIGH
Classic Buffer Overflow (CWE-120)
2026-05-04 VulDB
Buffer Overflow
7.4
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

8
PoC Detected
May 04, 2026 - 15:17 vuln.today
Public exploit code
Analysis Updated
May 04, 2026 - 10:28 vuln.today
v2 (cvss_changed)
Re-analysis Queued
May 04, 2026 - 10:22 vuln.today
cvss_changed
CVSS changed
May 04, 2026 - 10:22 NVD
8.8 (HIGH) 7.4 (HIGH)
Analysis Generated
May 04, 2026 - 10:00 vuln.today
EUVD ID Assigned
May 04, 2026 - 09:45 euvd
EUVD-2026-26941
Analysis Generated
May 04, 2026 - 09:45 vuln.today
CVE Published
May 04, 2026 - 08:45 nvd
HIGH 7.4

DescriptionNVD

A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument priDns leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

AnalysisAI

Buffer overflow in Totolink N300RH router firmware 3.2.4-B20220812 allows authenticated remote attackers to achieve complete device compromise via crafted DNS parameter in WAN configuration requests. The vulnerability exists in the setWanConfig function within /cgi-bin/cstecgi.cgi POST handler, exploitable by manipulating the priDns argument. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Inventory all Totolik N300RH devices running firmware 3.2.4-B20220812 and restrict administrative access to trusted networks only. Within 7 days: Contact Totolink support to confirm patch availability timeline and interim firmware versions; disable remote administration features if business-critical. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Share

CVE-2026-7749 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy