Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was found in Totolink N300RH 6..1c.1353_B20190305. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation results in os command injection. The attack can be initiated remotely. The exploit has been made public and could be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-08 | 3 | Disclosure2General1 |
| 2026-03-12 | 1 | Disclosure1 |
| 2026-03-13 | 1 | General1 |
CVE Alert: CVE-2026-3696 - Totolink - N300RH - https://www.redpacketsecurity.com/cve-alert-cve-2026-3696-totolink-n300rh/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3696 #totolink #n300rh
Post summary
The tweet announces a CVE alert for Totolink N300RH but includes no detailed technical, exploit, or mitigation information.
CVE-2026-3696 (CVSS:6.9, HIGH) is Analyzed. A vulnerability was found in Totolink N300RH 6..1c.1353_B20190305. The affected element is the function setWiFiWpsConfig..https://nvd.nist.gov/vuln/detail/CVE-2026-3696 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The tweet notes that CVE‑2026‑3696, a high‑severity vulnerability affecting the setWiFiWpsConfig function of Totolink N300RH routers, has been analyzed and documented on NVD, but provides no evidence of exploitation, mitigation, or a proof of concept.
CVE-2026-3696 (CVSS:6.9, HIGH) is Analyzed. A vulnerability was found in Totolink N300RH 6..1c.1353_B20190305. The affected element is the function setWiFiWpsConfig..https://nvd.nist.gov/vuln/detail/CVE-2026-3696 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The tweet announces a high‑severity vulnerability (CVE‑2026‑3696) in Totolink N300RH, specifying the affected function and linking to the NVD entry.
CVE-2026-3696 A vulnerability was found in Totolink N300RH 6..1c.1353_B20190305. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the compone… https://www.cve.org/CVERecord?id=CVE-2026-3696
Post summary
CVE-2026-3696 was discovered in the Totolink N300RH firmware, targeting the setWiFiWpsConfig function, but no PoC, exploit, or patch details are provided.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3696 - Totolink N300RH CGI cstecgi.cgi setWiFiWpsConfig os command injection Intel Report: https://ift.tt/qgOz9yQ
Post summary
The alert reports a command‑injection flaw (CVE‑2026‑3696) in Totolink N300RH’s CGI script but provides no PoC, exploit, or patch information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | totolink | n300rh | 4.0 | - | - |
| OS | totolink | n300rh_firmware | 6.1c.1353_b20190305 | - | - |