Totolink N300rh Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Totolink N300rh Firmware: 2 record(s), with affected versions and fixes.cpe:2.3:o:totolink:n300rh_firmware
CVE-2026-3696
Critical · 9.8
CWE-78 Mar 7, 2026
Totolink N300RH CGI cstecgi.cgi setWiFiWpsConfig os command injection
A vulnerability was found in Totolink N300RH 6..1c.1353_B20190305. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation results in os command injection. The attack can be initiated remotely. The exploit has been made public and could be used.
CVE-2026-3301
Critical · 9.8
CWE-78 Feb 27, 2026
Totolink N300RH Web Management cstecgi.cgi setWebWlanIdx os command injection
A security flaw has been discovered in Totolink N300RH 6.1c.1353_B20190305. Affected by this vulnerability is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument webWlanIdx results in os command injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.