{"metadata": {"vulnerability": "CVE-2026-7747", "count": 24, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 13}}, "data": [{"timestamp": "2026-05-03T00:00:00Z", "date_only": false, "value": "2026-05-03T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2026-7747", "field": "containers.cna.timeline.0.time", "text": "Advisory disclosed"}, {"timestamp": "2026-05-03T02:00:00Z", "date_only": false, "value": "2026-05-03T02:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2026-7747", "field": "containers.cna.timeline.1.time", "text": "VulDB entry created"}, {"timestamp": "2026-05-03T17:20:44.653Z", "date_only": false, "value": "2026-05-03T17:20:44.653Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-7747", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-03T19:25:59Z", "date_only": false, "value": "2026-05-03T19:25:59.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2026-7747", "field": "containers.cna.timeline.2.time", "text": "VulDB entry last update"}, {"timestamp": "2026-05-04T08:15:14.596Z", "date_only": false, "value": "2026-05-04T08:15:14.596Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-7747", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-04T08:15:14.596Z", "date_only": false, "value": "2026-05-04T08:15:14.596Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-7747", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-04T09:00:32.031Z", "date_only": false, "value": "2026-05-04T09:00:32.031587Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116515486312761169", "record": "cve-2026-7747", "field": "creation_timestamp", "uuid": "aa105ab7-b2a2-4999-b646-1bd02fcb761d", "content": "\ud83d\udd34 CRITICAL: CVE-2026-7747 in Totolink N300RH (v3.2.4-B20220812) \u2014 remote, unauthenticated buffer overflow via /cgi-bin/cstecgi.cgi Password param. Exploit is public; no patch yet. Restrict mgmt access! https://radar.offseq.com/threat/cve-2026-7747-buffer-overflow-in-totolink-n300rh-d88a1f5e #OffSeq #CVE20267747 #IoTSecurity", "url": "https://infosec.exchange/users/offseq/statuses/116515486312761169"}, {"timestamp": "2026-05-04T09:00:32.046Z", "date_only": false, "value": "2026-05-04T09:00:32.046755Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mkzcotcpov2m", "record": "cve-2026-7747", "field": "creation_timestamp", "uuid": "91632cb8-3f2c-4d1a-8870-b1a4e1e42245", "content": "Totolink N300RH (3.2.4-B20220812) faces a CRITICAL buffer overflow \u2014 remote, unauthenticated exploit now public. No patch: restrict device mgmt access & monitor for updates. https://radar.offseq.com/threat/cve-2026-7747-buffer-overflow-in-totolink-n300rh-d88a1f5e #OffSeq #IoTSecurity", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mkzcotcpov2m"}, {"timestamp": "2026-05-04T09:16:01Z", "date_only": false, "value": "2026-05-04T09:16:01Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JGVF-PM9W-MFRM", "record": "GHSA-JGVF-PM9W-MFRM", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-05-04T09:16:01.117Z", "date_only": false, "value": "2026-05-04T09:16:01.117", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-7747", "record": "FKIE_CVE-2026-7747", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-04T09:25:23.108Z", "date_only": false, "value": "2026-05-04T09:25:23.108472Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkze3bo7g72g", "record": "CVE-2026-7747", "field": "creation_timestamp", "uuid": "f6c2691e-5db7-4743-841f-b9e03d1fd496", "content": "\ud83d\udd34 CVE-2026-7747 - Critical (9.8)\n\nA security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerab...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7747/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkze3bo7g72g"}, {"timestamp": "2026-05-04T09:31:09Z", "date_only": false, "value": "2026-05-04T09:31:09Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JGVF-PM9W-MFRM", "record": "GHSA-JGVF-PM9W-MFRM", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-04T09:31:10Z", "date_only": false, "value": "2026-05-04T09:31:10Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JGVF-PM9W-MFRM", "record": "GHSA-JGVF-PM9W-MFRM", "field": "modified", "linked_record": true}, {"timestamp": "2026-05-04T10:53:07.446Z", "date_only": false, "value": "2026-05-04T10:53:07.446600Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkziy2wamq2p", "record": "CVE-2026-7747", "field": "creation_timestamp", "uuid": "be6dd69e-c824-41cf-9582-69d34a58e605", "content": "CVE-2026-7747 - Totolink N300RH Parameter cstecgi.cgi loginauth buffer overflow\nCVE ID : CVE-2026-7747\n \n Published : May 4, 2026, 9:16 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulner...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkziy2wamq2p"}, {"timestamp": "2026-05-04T11:16:11.607Z", "date_only": false, "value": "2026-05-04T11:16:11.607999Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkzkbh2bwx2k", "record": "CVE-2026-7747", "field": "creation_timestamp", "uuid": "d83fc969-1f88-4a51-9bce-905785e1bbda", "content": "CVE-2026-7747 - Totolink N300RH Parameter cstecgi.cgi loginauth buffer overflow\nCVE ID : CVE-2026-7747\n \n Published : May 4, 2026, 9:16 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulner...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkzkbh2bwx2k"}, {"timestamp": "2026-05-04T12:43:10.785Z", "date_only": false, "value": "2026-05-04T12:43:10.785712Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-7747", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-04T12:43:10.785Z", "date_only": false, "value": "2026-05-04T12:43:10.785712Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-7747", "record": "FKIE_CVE-2026-7747", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-05-04T12:43:29.421Z", "date_only": false, "value": "2026-05-04T12:43:29.421Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-7747", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-04T12:43:29.421Z", "date_only": false, "value": "2026-05-04T12:43:29.421Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-7747", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": true, "value": "2026-05-06", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2026-32747", "record": "CNVD-2026-32747", "field": "submitTime", "linked_record": true}, {"timestamp": "2026-08-19T00:00:00Z", "date_only": true, "value": "2026-08-19", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2026-32747", "record": "CNVD-2026-32747", "field": "openTime", "linked_record": true}, {"timestamp": "2026-09-12T10:00:18.192Z", "date_only": false, "value": "2026-09-12T10:00:18.192398Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/shimiscyberworld/1166", "record": "CVE-2026-7747", "field": "creation_timestamp", "uuid": "f4699325-7f9b-4ce8-b2f5-8b68afffb3af", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-7747 \u2014 CVSS 9.8\nTotolink N300RH Critical Buffer Overflow: Public Exploit Available\n\nCVE-2026-7747 \u2014 A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi of\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-7747 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "url": "https://t.me/shimiscyberworld/1166"}, {"timestamp": "2026-09-13T00:00:09.498Z", "date_only": false, "value": "2026-09-13T00:00:09.498215Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/shimiscyberworld/1166", "record": "CVE-2026-7747", "field": "creation_timestamp", "uuid": "fbc1d99f-6711-4207-95df-efa8db611442", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-7747 \u2014 CVSS 9.8\nTotolink N300RH Critical Buffer Overflow: Public Exploit Available\n\nCVE-2026-7747 \u2014 A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi of\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-7747 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "url": "https://t.me/shimiscyberworld/1166", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-26T19:10:00.163Z", "date_only": false, "value": "2026-10-26T19:10:00.163", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-7747", "record": "FKIE_CVE-2026-7747", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-05T11:13:48.819Z", "anchors": {"origin": {"timestamp": "2026-05-04T08:15:14.596Z", "date_only": false, "value": "2026-05-04T08:15:14.596Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-7747", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-05-04T08:15:14.596Z", "date_only": false, "value": "2026-05-04T08:15:14.596Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-7747", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-09-13T00:00:09.498Z", "date_only": false, "value": "2026-09-13T00:00:09.498215Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/shimiscyberworld/1166", "record": "CVE-2026-7747", "field": "creation_timestamp", "uuid": "fbc1d99f-6711-4207-95df-efa8db611442", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-7747 \u2014 CVSS 9.8\nTotolink N300RH Critical Buffer Overflow: Public Exploit Available\n\nCVE-2026-7747 \u2014 A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi of\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-7747 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "url": "https://t.me/shimiscyberworld/1166", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 11375094.902, "hours": 3159.7485838888892, "days": 131.65619099537037, "min_seconds": 11375094.902, "max_seconds": 11375094.902, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-04T08:15:14.596Z", "date_only": false, "value": "2026-05-04T08:15:14.596Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-7747", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-13T00:00:09.498Z", "date_only": false, "value": "2026-09-13T00:00:09.498215Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/shimiscyberworld/1166", "record": "CVE-2026-7747", "field": "creation_timestamp", "uuid": "fbc1d99f-6711-4207-95df-efa8db611442", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-7747 \u2014 CVSS 9.8\nTotolink N300RH Critical Buffer Overflow: Public Exploit Available\n\nCVE-2026-7747 \u2014 A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi of\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-7747 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "url": "https://t.me/shimiscyberworld/1166", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 15994714.223195, "hours": 4442.976173109722, "days": 185.1240072129051, "min_seconds": 15994714.223195, "max_seconds": 15994714.223195, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-04T08:15:14.596Z", "date_only": false, "value": "2026-05-04T08:15:14.596Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-7747", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-05T11:13:48.819Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 4619619.321195, "hours": 1283.2275892208334, "days": 53.46781621753472, "min_seconds": 4619619.321195, "max_seconds": 4619619.321195, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-13T00:00:09.498Z", "date_only": false, "value": "2026-09-13T00:00:09.498215Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/shimiscyberworld/1166", "record": "CVE-2026-7747", "field": "creation_timestamp", "uuid": "fbc1d99f-6711-4207-95df-efa8db611442", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-7747 \u2014 CVSS 9.8\nTotolink N300RH Critical Buffer Overflow: Public Exploit Available\n\nCVE-2026-7747 \u2014 A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi of\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-7747 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "url": "https://t.me/shimiscyberworld/1166", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-05T11:13:48.819Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}