CVE-2026-7717Disclosure

LOWCVSS 7.4 · HIGH

Exploit discussion active in current signal (3 latest mentions)

Immediate actions

Patch affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227. This issue affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Executing a manipulation of the argument File can lead to buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Back to dashboard

2.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
4 mentions across 2 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 2 signals
Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 4 classified signals
Peaked at 3 mentions on most recent observed day (2026-06-02)
4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d

Signal classification1 categories

Disclosure

4100.0%

Classification over time

Date	Total	Labels

2026-05-15	1	Disclosure1
2026-06-02	3	Disclosure3

Full discourse4 posts

Lyrie.ai@lyrie_ai128d
Disclosure
On May 4, 2026, security researchers disclosed CVE-2026-7717—a high-severity buffer overflow vulnerability in the Totolink WA300 wireless router. The flaw was published with working proof-of-concept code and affects firmware version 5.2cu.7112B20190227.
Post summary
Security researchers disclosed CVE‑2026‑7717, a high‑severity buffer overflow in the Totolink WA300 router, and released working proof‑of‑concept code targeting firmware 5.2cu.7112B20190227.
1000037
238 followersView on X
Lyrie.ai@lyrie_ai128d
Disclosure
TL;DR A critical buffer overflow (CVE-2026-7717, CVSS 8.8) in Totolink WA300 routers allows unauthenticated remote code execution via a malformed POST request. Public exploits exist. This vulnerability exposes millions of small business perimeter devices to immediate…
Post summary
The text announces a critical buffer overflow (CVE‑2026‑7717) in Totolink WA300 routers that allows unauthenticated RCE via a malformed POST request, with public exploits already available.
1000043
238 followersView on X
Lyrie.ai@lyrie_ai128d
Disclosure
4, 2026, — The Edge Router Just Became the Breach: Totolink WA300 Unauthenticated RCE Exposes SMB Perimeter to Machine-Speed Attacks. On May 4, 2026, security researchers disclosed CVE-2026-7717—a high-severity buffer overflow vulnerability in the Totolink WA300 wireless…
Post summary
Security researchers disclosed CVE‑2026‑7717, a high‑severity buffer overflow in the Totolink WA300 wireless router, potentially allowing unauthenticated remote code execution.
1000037
238 followersView on X
ADK Cyber@ADKCyber145d
Disclosure
A high-severity buffer overflow vulnerability (CVE-2026-7717) affects Totolink WA300 routers. Remote exploitation is possible. Businesses using this device should prioritize firmware updates to mitigate risks. #cybersecurity
Post summary
CVE-2026-7717 is a high‑severity buffer overflow in Totolink WA300 routers, enabling remote exploitation. Users are urged to apply firmware updates promptly to mitigate the risk.
0000040
80 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-7717

Lyrie.ai[verified]@lyrie_aiDisclosure

Security researchers disclosed CVE‑2026‑7717, a high‑severity buffer overflow in the Totolink WA300 router, and released working proof‑of‑concept code targeting firmware 5.2cu.7112B20190227.

Lyrie.ai[verified]@lyrie_aiDisclosure

The text announces a critical buffer overflow (CVE‑2026‑7717) in Totolink WA300 routers that allows unauthenticated RCE via a malformed POST request, with public exploits already available.

Lyrie.ai[verified]@lyrie_aiDisclosure

Security researchers disclosed CVE‑2026‑7717, a high‑severity buffer overflow in the Totolink WA300 wireless router, potentially allowing unauthenticated remote code execution.

ADK Cyber[verified]@ADKCyberDisclosure

CVE-2026-7717 is a high‑severity buffer overflow in Totolink WA300 routers, enabling remote exploitation. Users are urged to apply firmware updates promptly to mitigate the risk.