CVE-2026-10187-nvd.nist.gov-Received

A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the co…

Published:

30 May 2026 at 22:00:00

Alert date:

31 May 2026 at 16:00:53

Source:

nvd.nist.gov

Mobile & IoT, Network Infrastructure

A stack-based buffer overflow vulnerability (CVE-2026-10187) was discovered in Totolink N300RH router firmware version 6.1c.1353_B20190305. The vulnerability affects the setWiFiBasicConfig function in wireless.so file within the Web Management Interface. Attackers can exploit this by manipulating the KeyStr argument to trigger the buffer overflow. The attack can be performed remotely and public exploits are now available, making this a high-risk vulnerability for affected devices.

Technical details

Mitigation steps:

Affected products:

Totolink N300RH