Exploitation observed; activity peaked at 4 mentions and remains active
Recommended action window: Immediate (within 24h)
NVD description
A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. Performing a manipulation of the argument Password results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
Priority
HIGH
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-03 | 1 | Disclosure1 |
| 2026-05-04 | 4 | Disclosure3Patch1 |
| 2026-05-11 | 1 | Active Exploitation1 |
| 2026-05-15 | 2 | General1Patch1 |
| 2026-05-24 | 1 | Patch1 |
https://lyrie.ai/research/research/cve-2026-7747-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The linked advisory discusses CVE‑2026‑7747, providing technical details, exploit code, and a patch for the vulnerability, but there is no evidence of active exploitation.
Unpopular opinion: The cybersecurity industry is selling you dashboards. CVE: CVE-2026-7747 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The post merely announces a CVE identifier with its CVSS score and severity rating, without any additional technical or operational context.
CVE-2026-7747 A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi of the… https://www.cve.org/CVERecord?id=CVE-2026-7747
Post summary
The text announces CVE‑2026‑7747, a security flaw in a Totolink router’s loginauth function, but provides no PoC, exploit, or mitigation details.
🚨 CVE-2026-7747 — CVSS 9.8/10 ██████████ A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/gUjenetAoi
Post summary
The tweet announces CVE‑2026‑7747 as a critical flaw in Totolink N300RH, provides its CVSS score, and urges users to apply the available patch.
A new vulnerability with increased severity was disclosed for Totolink N300RH (CVE-2026-7747) https://vuldb.com/vuln/360922
Post summary
The post announces a newly disclosed vulnerability (CVE‑2026‑7747) for Totolink N300RH, noting an increased severity but without further technical or incident details.
🚨 CRITICAL: CVE-2026-7747 (CVSS 9.8) - Remote buffer overflow in Totolink N300RH router v3.2.4. Exploit publicly available. Affects loginauth function in /cgi-bin/cstecgi[.]cgi. Patch immediately! #CVE #Vulnerability #PatchNow https://t.co/vShFkkKnON
Post summary
The post announces a critical CVE-2026-7747 remote buffer overflow in Totolink N300RH routers, notes the exploit is publicly available, and urges an immediate patch.
It is possible to see elevated activities targeting Totolink N300RH (CVE-2026-7747) https://vuldb.com/vuln/360922/cti
Post summary
Elevated activity against Totolink N300RH indicates the CVE-2026-7747 may be under active exploitation, though specific details or patches are not provided.
Totolink N300RH Password buffer overflow vulnerability (CVE-2026-7747) #CVE20267747 #CyberSecurity #PasswordBufferOverflowVulnerability #Totolink https://www.systemtek.co.uk/?p=50892 https://t.co/2Ht9WaWLNH
Post summary
The tweet announces a new password buffer overflow vulnerability in Totolink N300RH (CVE‑2026‑7747) but provides no exploit, mitigation, or in‑the‑wild activity details.
🚨*CVE* CVE-2026-7747 A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi of the… https://www.cve.org/CVERecord?id=CVE-2026-7747 ----- Traducción: CVE-2026-7747 Se … http://infoflow.cloud`
Post summary
CVE‑2026‑7747 is a newly discovered vulnerability affecting the loginauth function in /cgi-bin/cstecgi.cgi on Totolink N300RH firmware 3.2.4‑B20220812; no exploit, patch, or active exploitation is mentioned.