Exploitation observed; activity peaked at 5 mentions and remains active
Recommended action window: Immediate (within 24h)
NVD description
A security flaw has been discovered in Totolink WA300 5.2cu.7112_B20190227. The affected element is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument http_host results in buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
RISING
| Date | Total | Labels |
|---|
| 2026-05-03 | 1 | Disclosure1 |
| 2026-05-04 | 2 | Disclosure2 |
| 2026-05-11 | 1 | Active Exploitation1 |
| 2026-05-15 | 5 | Disclosure4General1 |
| 2026-05-24 | 1 | Exploit1 |
| 2026-06-02 | 1 | Active Exploitation1 |
Our CTI team identified a lot of activities targeting Totolink WA300 (CVE-2026-7719) https://vuldb.com/vuln/360895/cti
Post summary
The CTI team reports widespread activity targeting Totolink WA300 (CVE-2026-7719), suggesting the vulnerability is being actively exploited.
CVE-2026-7719 · 9.8 → 3.1 The WiFi Router That Became a Backdoor: Totolink WA300 CVSS 9.8 RCE Now in the Wild
Post summary
CVE‑2026‑7719, an RCE vulnerability in Totolink WA300 routers with a CVSS score of 9.8, is now being actively exploited in the wild.
References CVE: CVE-2026-7719 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The entry reports a new critical CVE with its CVSS details but provides no additional context such as proof of concept, exploitation, or mitigation steps.
https://lyrie.ai/research/research/cve-2026-7719-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The provided text directs to an advisory link but contains no explicit details about the vulnerability, PoC, exploitation status, or mitigation.
CRITICAL: CVE-2026-7719 (CVSS 9.8) — multiple products. CVE: CVE-2026-7719 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
This statement discloses the existence of a critical vulnerability, CVE-2026-7719, with a CVSS score of 9.8 and detailed exploit characteristics, but provides no PoC, exploit code, or mitigation information.
CVE: CVE-2026-7719 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory A security flaw has been discovered in Totolink WA300 5.2cu.7112B20190227.
Post summary
A critical vulnerability (CVE-2026-7719) was discovered in the Totolink WA300 firmware, with a CVSS score of 9.8 and marked as a critical advisory.
🚨 CVE-2026-7719 — CVSS 9.8/10 ██████████ A security flaw has been discovered in Totolink WA300 5.2cu.7112_B20190227. The affected element is the function... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/tZ5Vt6P4b5
Post summary
The tweet discloses the discovery of CVE‑2026‑7719 in Totolink WA300, noting a high CVSS score and critical severity, and informs readers that a patch is now available, without providing PoC or exploit details.
🚨 CRITICAL: CVE-2026-7719 (CVSS 9.8) - Buffer overflow in Totolink WA300 router allows remote code execution via /cgi-bin/cstecgi[.]cgi. Public exploit available. Patch immediately! #CVE #Vulnerability #PatchNow https://t.co/CGTZjTfoEV
Post summary
The tweet warns of a critical buffer overflow in Totolink WA300 routers, notes a publicly available exploit, and urges immediate patching.
A critical CVE-2026-7719 affecting Totolink WA300 routers allows remote buffer overflow attacks. Mohawk Valley SMBs should check for affected devices and apply patches or mitigations immediately to reduce risk. Stay vigilant. #cybersecurity
Post summary
A remote buffer overflow vulnerability (CVE-2026-7719) in Totolink WA300 routers has been disclosed; users are urged to apply patches or mitigations immediately.
CVE-2026-7719 Buffer Overflow in Totolink WA300 5.2cu.7112_B20190227 POST Request Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7719
Post summary
The post announces a buffer overflow vulnerability (CVE-2026-7719) affecting Totolink WA300’s POST request handler, providing technical details but no exploit or patch information.
We have just added an important vulnerability affecting Totolink WA300 (CVE-2026-7719) https://vuldb.com/vuln/360895
Post summary
A new vulnerability (CVE-2026-7719) affecting Totolink WA300 has been reported with a link to a vulnerability database entry.