Which versions of Totolink N300RH are affected by CVE-2026-7750?

Totolik N300RH routers (version 3.2.4-B20220812 and potentially earlier) are vulnerable to remote code execution via an authenticated buffer overflow attack.

Is there a public PoC exploit available for CVE-2026-7750?

Yes, a public proof-of-concept exploit is available for CVE-2026-7750. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-7750?

Within 24 hours: Identify all Totolink N300RH devices in your network (search SNMP, asset inventory, and network scans for model/firmware version 3.2.4-B20220812); document exposure status (internet-facing vs. internal-only). Within 7 days: Change default credentials on all affected routers and restrict web interface access to trusted networks only via firewall rules; monitor for suspicious POST requests to /cgi-bin/cstecgi.cgi. Within 30 days: Check Totolik's official support portal for firmware updates beyond 3.2.4-B20220812; evaluate replacement with devices receiving active security updates, or decommission unsupported hardware.

Totolink N300RH CVE-2026-7750

Q: What is the CVSS score of CVE-2026-7750?

CVE-2026-7750 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-26942 HIGH

Classic Buffer Overflow (CWE-120)

2026-05-04 VulDB

Buffer Overflow

7.4

CVSS 4.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

May 04, 2026 - 15:17 vuln.today

Public exploit code

Analysis Updated

May 04, 2026 - 10:27 vuln.today

v2 (cvss_changed)

Re-analysis Queued

May 04, 2026 - 10:22 vuln.today

cvss_changed

CVSS changed

May 04, 2026 - 10:22 NVD

8.8 (HIGH) 7.4 (HIGH)

Analysis Generated

May 04, 2026 - 10:00 vuln.today

EUVD ID Assigned

May 04, 2026 - 09:45 euvd

EUVD-2026-26942

Analysis Generated

May 04, 2026 - 09:45 vuln.today

CVE Published

May 04, 2026 - 09:00 nvd

HIGH 7.4

DescriptionNVD

A vulnerability was detected in Totolink N300RH 3.2.4-B20220812. This vulnerability affects the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument mac_address results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.

AnalysisAI

Remote authenticated attackers can execute arbitrary code on Totolink N300RH 3.2.4-B20220812 routers via buffer overflow in the setMacFilterRules function. Exploitation requires low-privilege authentication to the router's web interface, then sending a crafted POST request with an oversized mac_address parameter to /cgi-bin/cstecgi.cgi. …

RemediationAI

Within 24 hours: Identify all Totolink N300RH devices in your network (search SNMP, asset inventory, and network scans for model/firmware version 3.2.4-B20220812); document exposure status (internet-facing vs. internal-only). …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

CVE-2026-7750 vulnerability details – vuln.today

Back

Totolink N300RH CVE-2026-7750

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

RemediationAI

Analysis

Full analysis requires sign-in

Share

Totolink N300RH CVE-2026-7750

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

RemediationAI

Full analysis requires sign-in

Share

External POC / Exploit Code