CVE-2026-10187

EUVD-2026-33509
A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Management Interface. Performing a manipulation of the argument KeyStr results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Common Weakness Enumeration
References
https://vuldb.com/cve/CVE-2026-10187
https://vuldb.com/submit/819971
https://vuldb.com/submit/820133
https://vuldb.com/vuln/367468
https://vuldb.com/vuln/367468/cti
https://www.totolink.net/
https://wx.mail.qq.com/s?k=iXbjuHnfMwoD0oWW3v