CVE-2026-10187Disclosure

MEDIUMCVSS 8.9 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Management Interface. Performing a manipulation of the argument KeyStr results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.

4.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-121

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • Patch or workaround signal is available
  • 7 mentions across 5 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 5 signals
  • Disclosure: 3 classified signals
  • Peaked 3d ago at 3 mentions (2026-05-31); latest day: 1
  • 7 total mentions across 5 days

Deep dive

Activity timeline7 mentions / 5d
01223Mentions · 2026-05-30: 1Mentions · 2026-05-31: 3Mentions · 2026-06-01: 1Mentions · 2026-06-07: 1Mentions · 2026-06-15: 1PoC Mentioned / Linked · 2026-06-15: 1Exploit Tool / Code · 2026-06-15: 1Patch / Workaround · 2026-05-31: 1Patch / Workaround · 2026-06-01: 1Patch / Workaround · 2026-06-07: 1Technical Details · 2026-05-31: 3Technical Details · 2026-06-01: 1Technical Details · 2026-06-07: 105-3005-3106-0106-0706-15
Signal classification3 categories
Disclosure
342.9%
Patch
228.6%
Exploit
228.6%
Referenced assets6 URLs
Classification over time
DateTotalLabels
2026-05-301
Disclosure1
2026-05-313
Disclosure2Patch1
2026-06-011
Patch1
2026-06-071
Exploit1
2026-06-151
Exploit1
Full discourse7 posts
  • Clandestine@akaclandestine
    Exploit

    Exploit For Totolink CVE-2026-10187 Link Download : https://send.exploit.in/#c7dc3cbf84c3032b0381aa385198e021!ZjDTN_OGutI-t01n4PreHLnXuuc26tC9Eeah7ePwtfY P.S: Limit Download (10) https://t.co/QrvZoDER61

    Post summary

    The post shares a download link offering an exploit for Totolink devices vulnerable to CVE‑2026‑10187, with no additional technical or patch information provided.

    115076337.2K
    63.3K followersView on X
  • PurpleOps@PurpleOps_io
    Patch

    Patch Priority: Totolink N300RH router remote code execution with likely internet exposure Affected: Totolink N300RH Internet-facing risks dominate, led by a pre-auth remote code execution in a consumer router. • CVE-2026-10187 (CVSS 9.8) Totolink N300RH 6.1c.1353_B20190305 contains a flaw in setWiFiBasicConfig (http://wireless.so) on the Web Management Interface that allows a remote attacker to manipulate KeyStr and trigger a stack-based buffer overflow. 🛠️ Action • Patch/upgrade to the latest Totolink firmware as advised by the vendor. • Prioritize internet-facing instances and edge appliances first. • If no fix is available, apply mitigations and reduce exposure (disable feature/module, restrict access). • Add detections for exploitation patterns (web interface anomalies, buffer overflow attempts). • Hunt for indicators around affected services during disclosure-to-now window (logs, EDR, WAF). • Validate remediation (version checks, config verification) and monitor for reversion.

    Post summary

    CVE‑2026‑10187 is a high‑severity RCE affecting Totolink N300RH routers; vendors advise upgrading firmware, and administrators should mitigate exposure and monitor for exploitation.

    00010118
    583 followersView on X
  • SecAlerts@SecAlertsCo
    Disclosure

    CVE-2026-10187: Totolink N300RH 6.1c.1353 has a stack-based buffer overflow in setWiFiBasicConfig (http://wireless.so). Unauthenticated, network-exploitable. CVSS 8.9 high. Check your routers. #infosec https://secalerts.co/vulnerability/CVE-2026-10187 https://t.co/VQz7ouP53y

    Post summary

    The text announces a new stack‑based buffer overflow vulnerability in Totolink N300RH routers, providing technical details and a high CVSS score but no PoC, exploit, or patch information.

    00010112
    825 followersView on X
  • Orizon@OrizonCyber
    Patch

    🚨 CVE-2026-10187 — CVSS 9.8/10 ██████████ A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/BsbmpChu8W

    Post summary

    A critical vulnerability (CVE‑2026‑10187) in Totolink routers, scored 9.8/10, has been detected and vendor has issued a patch. No exploit details or active exploitation evidence are disclosed.

    10000222
    47 followersView on X
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Exploit

    CVE-2026-10187 - Critical stack buffer overflow in Totolink N300RH. Remote RCE via KeyStr argument. CVSS 9.8. Exploit public, no patch available. Disable remote management immediately. #CVE #IoT #infosec #CVEAlert GET ALL INFO FREE: https://www.valtersit.com/cve/CVE-2026-10187/

    Post summary

    CVE-2026-10187 is a critical stack buffer overflow in the Totolink N300RH that allows remote RCE via the KeyStr argument. An exploit is publicly available and no patch exists, so users should disable remote management immediately.

    0000042
    919 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-10187 A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file http://wireless.so of the componen… https://www.cve.org/CVERecord?id=CVE-2026-10187

    Post summary

    A CVE for Totolink N300RH firmware was reported with specific function and file details, but no exploitation, patch, or debunking information is present.

    00000187
    57.6K followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    A severe vulnerability was disclosed for Totolink N300RH (CVE-2026-10187) https://vuldb.com/vuln/367468

    Post summary

    The text announces the disclosure of a severe vulnerability (CVE-2026-10187) affecting the Totolink N300RH router, but provides no additional details on exploitation, mitigation, or technical characteristics.

    0000071
    2.2K followersView on X

Explore more