Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. Impacted is the function start_lan of the file /apply.cgi. The manipulation of the argument Channel/ApCliSsid leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-03 | 2 | Disclosure1General1 |
| 2026-05-15 | 1 | Patch1 |
| 2026-05-31 | 3 | Disclosure3 |
A severe vulnerability was disclosed for Shenzhen Libituo Technology LBT-T300-HW1 (CVE-2026-7675) https://vuldb.com/vuln/360828
Post summary
The notice announces the disclosure of a severe vulnerability (CVE-2026-7675) affecting the Shenzhen Libituo LBT-T300-HW1 device.
Shenzhen Libituo Technology's LBT-T300-HW1 network device ships with two unauthenticated remote buffer overflow vulnerabilities (CVE-2026-7674, CVE-2026-7675, both CVSS 8.8), disclosed May 3, 2026. The vendor has not responded. No patch is available. Remote attackers need…
Post summary
Shenzhen Libituo's LBT‑T300‑HW1 device has two unauthenticated remote buffer overflows (CVE‑2026‑7674/7675, CVSS 8.8) disclosed on May 3, 2026; the vendor has not responded and no patch is yet available.
CVE-2026-7674 and CVE-2026-7675 follow identical exploitation patterns: an unauthenticated attacker can manipulate specific arguments (vpnpptpserver and vpnl2tpserver) in the startsingleservice() function, sending malformed data that overflows the allocated buffer. The…
Post summary
The passage details two CVEs that enable unauthenticated attackers to trigger a buffer overflow by manipulating specific arguments, although no PoC, exploit code, or patch information is provided.
The Device That Never Got Patched: Shenzhen Libituo''s Dual CVSS 8.8 Buffer Overflow Crisis. Shenzhen Libituo Technology's LBT-T300-HW1 network device ships with two unauthenticated remote buffer overflow vulnerabilities CVE-2026-7674, CVE-2026-7675, both CVSS 8.8,…
Post summary
New unauthenticated remote buffer overflow vulnerabilities (CVE-2026-7674/7675) with CVSS 8.8 have been disclosed for Shenzhen Libituo's LBT‑T300‑HW1 device, which remains unpatched.
A high-severity buffer overflow vulnerability (CVE-2026-7675) affects Shenzhen Libituo LBT-T300-HW1 devices. This flaw can be exploited remotely. Mohawk Valley SMBs and healthcare orgs should review device security and seek patches or mitigations promptly. #Cybersecurity
Post summary
The post announces a high‑severity buffer overflow flaw in Shenzhen Libituo LBT‑T300‑HW1 devices and urges stakeholders to apply available patches or mitigations promptly.
⚡ New CVE Alert: CVE-2026-7675 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-7675 #CVE-2026-7675 #CVE #High #CyberSecurity #InfoSec https://t.co/I9B3PcPEmx
Post summary
The tweet merely announces a new high‑severity CVE, linking to the NVD, without providing exploitation details, patches, or technical specifics.