VulnSocial

CVE-2026-7749Disclosure

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument priDns leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 3 mentions (2026-05-04); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-05-04: 3Mentions · 2026-05-24: 1Patch / Workaround · 2026-05-24: 1Technical Details · 2026-05-04: 2Technical Details · 2026-05-24: 105-0405-24
Signal classification3 categories
Disclosure
250.0%
General
125.0%
Patch
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-05-043
Disclosure2General1
2026-05-241
Patch1
Full discourse4 posts
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH: CVE-2026-7749 (CVSS 8.8) - Buffer overflow in Totolink N300RH router v3.2.4. Remotely exploitable via /cgi-bin/cstecgi[.]cgi. Exploit publicly available. Patch immediately. #CVE #PatchNow #ThreatIntel https://t.co/lnuSv9mDUB

    Post summary

    High‑severity CVE‑2026‑7749 enables remote buffer overflow on Totolink N300RH routers; the exploit is publicly available and an immediate patch is advised.

    0000091
    30 followersView on X
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-7749 A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component … https://www.cve.org/CVERecord?id=CVE-2026-7749 ----- Traducción: CVE-2026-7749 Se … http://infoflow.cloud`

    Post summary

    A brief notice reports CVE‑2026‑7749 affecting the setWanConfig function in Totolink N300RH, without additional technical details, exploit information, or patch guidance.

    0000032
    75 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-7749 A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component … https://www.cve.org/CVERecord?id=CVE-2026-7749

    Post summary

    CVE-2026-7749 has been reported for Totolink N300RH firmware, highlighting a vulnerability in the setWanConfig function of /cgi-bin/cstecgi.cgi; no PoC, exploit, patch, or active exploitation details are provided.

    00000180
    57.4K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-7749 Buffer Overflow in Totolink N300RH 3.2.4-B20220812 setWanConfig Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7749 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3

    Post summary

    The tweet announces a buffer overflow vulnerability (CVE-2026-7749) affecting the Totolink N300RH firmware, but provides no PoC, exploit details, or patch information.

    0000052
    4.0K followersView on X

Explore more

Back to dashboard