https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 21 Jun 2026 06:04:22 +0000 https://vulnerability.circl.lu/sighting/f42d5c7d-820c-4296-af34-15790b19a240/export {"uuid": "f42d5c7d-820c-4296-af34-15790b19a240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10187", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116671908120912693", "content": "\u26a0\ufe0f CVE-2026-10187 CRITICAL: Totolink N300RH (6.1c.1353_B20190305) is exposed to a remote stack-based buffer overflow in setWiFiBasicConfig. Exploit is public, no patch yet \u2014 restrict Web Management access! https://radar.offseq.com/threat/cve-2026-10187-stack-based-buffer-overflow-in-toto-571e12d5 #OffSeq #IoT #Infosec #Vuln", "creation_timestamp": "2026-06-01T00:00:36.965328Z"} {"uuid": "f42d5c7d-820c-4296-af34-15790b19a240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10187", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116671908120912693", "content": "\u26a0\ufe0f CVE-2026-10187 CRITICAL: Totolink N300RH (6.1c.1353_B20190305) is exposed to a remote stack-based buffer overflow in setWiFiBasicConfig. Exploit is public, no patch yet \u2014 restrict Web Management access! https://radar.offseq.com/threat/cve-2026-10187-stack-based-buffer-overflow-in-toto-571e12d5 #OffSeq #IoT #Infosec #Vuln", "creation_timestamp": "2026-06-01T00:00:36.965328Z"} https://vulnerability.circl.lu/sighting/f42d5c7d-820c-4296-af34-15790b19a240/export Mon, 01 Jun 2026 00:00:36 +0000 https://vulnerability.circl.lu/sighting/94a56039-01a9-42f6-8da9-dd193b4e112a/export {"uuid": "94a56039-01a9-42f6-8da9-dd193b4e112a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10187", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mn6rl7xohh2r", "content": "CRITICAL: Totolink N300RH routers (6.1c.1353_B20190305) face remote stack overflow (CVE-2026-10187). Exploit is public! Restrict Web Management ASAP until patch arrives. https://radar.offseq.com/threat/cve-2026-10187-stack-based-buffer-overflow-in-toto-571e12d5 #OffSeq #IoTSecurity #Vulnerability", "creation_timestamp": "2026-06-01T00:00:38.122362Z"} {"uuid": "94a56039-01a9-42f6-8da9-dd193b4e112a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10187", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mn6rl7xohh2r", "content": "CRITICAL: Totolink N300RH routers (6.1c.1353_B20190305) face remote stack overflow (CVE-2026-10187). Exploit is public! Restrict Web Management ASAP until patch arrives. https://radar.offseq.com/threat/cve-2026-10187-stack-based-buffer-overflow-in-toto-571e12d5 #OffSeq #IoTSecurity #Vulnerability", "creation_timestamp": "2026-06-01T00:00:38.122362Z"} https://vulnerability.circl.lu/sighting/94a56039-01a9-42f6-8da9-dd193b4e112a/export Mon, 01 Jun 2026 00:00:38 +0000 https://vulnerability.circl.lu/sighting/0cde025a-5786-4e3d-9246-9d05805604ec/export {"uuid": "0cde025a-5786-4e3d-9246-9d05805604ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "Telegram/mH9Q0epJCMco7b4Phu2MaoIM6BdP5uO09lWAriMT8ef_Xxw", "content": "", "creation_timestamp": "2026-06-03T11:00:12.000000Z"} {"uuid": "0cde025a-5786-4e3d-9246-9d05805604ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "Telegram/mH9Q0epJCMco7b4Phu2MaoIM6BdP5uO09lWAriMT8ef_Xxw", "content": "", "creation_timestamp": "2026-06-03T11:00:12.000000Z"} https://vulnerability.circl.lu/sighting/0cde025a-5786-4e3d-9246-9d05805604ec/export Wed, 03 Jun 2026 11:00:12 +0000 https://vulnerability.circl.lu/sighting/6c50d756-b1bf-41cc-a11d-1ff01c6efb76/export {"uuid": "6c50d756-b1bf-41cc-a11d-1ff01c6efb76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "Telegram/5KTwmA96Kj45TkZqBYLm7RQJ-3Dt3Yk-Ro8oNdfED5lawJI", "content": "", "creation_timestamp": "2026-06-03T15:00:06.000000Z"} {"uuid": "6c50d756-b1bf-41cc-a11d-1ff01c6efb76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "Telegram/5KTwmA96Kj45TkZqBYLm7RQJ-3Dt3Yk-Ro8oNdfED5lawJI", "content": "", "creation_timestamp": "2026-06-03T15:00:06.000000Z"} https://vulnerability.circl.lu/sighting/6c50d756-b1bf-41cc-a11d-1ff01c6efb76/export Wed, 03 Jun 2026 15:00:06 +0000 https://vulnerability.circl.lu/sighting/97fff232-8610-451a-83ce-6d56ed896029/export {"uuid": "97fff232-8610-451a-83ce-6d56ed896029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo4hkmfejb2g", "content": "\ud83d\udea8 CRITICAL: CVE-2026-10187 \u2014 CVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nTotolink N300RH \u2014 Stack-based buffer overflow in setWiFiBasicConfig (wireless.so). Crafted KeyStr argument triggers overflow in web management interface. Full router compromise.\n\n\ud83c\udfaf WHO'S AFFECTED:\n \u2022 Totolink N300RH\n \u2022 SOHO Routers\n\n\u2694\ufe0f HOW IT", "creation_timestamp": "2026-06-12T19:21:12.094116Z"} {"uuid": "97fff232-8610-451a-83ce-6d56ed896029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo4hkmfejb2g", "content": "\ud83d\udea8 CRITICAL: CVE-2026-10187 \u2014 CVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nTotolink N300RH \u2014 Stack-based buffer overflow in setWiFiBasicConfig (wireless.so). Crafted KeyStr argument triggers overflow in web management interface. Full router compromise.\n\n\ud83c\udfaf WHO'S AFFECTED:\n \u2022 Totolink N300RH\n \u2022 SOHO Routers\n\n\u2694\ufe0f HOW IT", "creation_timestamp": "2026-06-12T19:21:12.094116Z"} https://vulnerability.circl.lu/sighting/97fff232-8610-451a-83ce-6d56ed896029/export Fri, 12 Jun 2026 19:21:12 +0000 https://vulnerability.circl.lu/sighting/d5dabaf6-9497-4a55-b7ee-2480f630405b/export {"uuid": "d5dabaf6-9497-4a55-b7ee-2480f630405b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo4hoksxsg2j", "content": "\ud83d\udea8 CRITICAL: CVE-2026-10187\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so\n\n\ud83c\udfaf WHO'S AFFECTED:\n \u2022 enterprise systems\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack: remotely over the ne", "creation_timestamp": "2026-06-12T19:23:24.422104Z"} {"uuid": "d5dabaf6-9497-4a55-b7ee-2480f630405b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo4hoksxsg2j", "content": "\ud83d\udea8 CRITICAL: CVE-2026-10187\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so\n\n\ud83c\udfaf WHO'S AFFECTED:\n \u2022 enterprise systems\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack: remotely over the ne", "creation_timestamp": "2026-06-12T19:23:24.422104Z"} https://vulnerability.circl.lu/sighting/d5dabaf6-9497-4a55-b7ee-2480f630405b/export Fri, 12 Jun 2026 19:23:24 +0000 https://vulnerability.circl.lu/sighting/2cab2bfa-3167-4f6a-b85d-8b85bc4474c6/export {"uuid": "2cab2bfa-3167-4f6a-b85d-8b85bc4474c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo4hqj7ezv2y", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-10187\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Management Interface. Performing a manipulation of the argument Key", "creation_timestamp": "2026-06-12T19:24:30.300956Z"} {"uuid": "2cab2bfa-3167-4f6a-b85d-8b85bc4474c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo4hqj7ezv2y", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-10187\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Management Interface. Performing a manipulation of the argument Key", "creation_timestamp": "2026-06-12T19:24:30.300956Z"} https://vulnerability.circl.lu/sighting/2cab2bfa-3167-4f6a-b85d-8b85bc4474c6/export Fri, 12 Jun 2026 19:24:30 +0000 https://vulnerability.circl.lu/sighting/16f4f1d3-e88b-450e-bb50-f8003bdf92ec/export {"uuid": "16f4f1d3-e88b-450e-bb50-f8003bdf92ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo6436u25f26", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-10187\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Management Interface. Performing a manipulation of the argument Key", "creation_timestamp": "2026-06-13T11:01:06.050334Z"} {"uuid": "16f4f1d3-e88b-450e-bb50-f8003bdf92ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo6436u25f26", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-10187\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Management Interface. Performing a manipulation of the argument Key", "creation_timestamp": "2026-06-13T11:01:06.050334Z"} https://vulnerability.circl.lu/sighting/16f4f1d3-e88b-450e-bb50-f8003bdf92ec/export Sat, 13 Jun 2026 11:01:06 +0000 https://vulnerability.circl.lu/sighting/3af556ae-e27b-4845-9877-d4abc8114b42/export {"uuid": "3af556ae-e27b-4845-9877-d4abc8114b42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo75kymjtl2o", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-10187\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Management Interface. Performing a manipulation of the argument Key", "creation_timestamp": "2026-06-13T21:01:08.851537Z"} {"uuid": "3af556ae-e27b-4845-9877-d4abc8114b42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo75kymjtl2o", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-10187\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Management Interface. Performing a manipulation of the argument Key", "creation_timestamp": "2026-06-13T21:01:08.851537Z"} https://vulnerability.circl.lu/sighting/3af556ae-e27b-4845-9877-d4abc8114b42/export Sat, 13 Jun 2026 21:01:08 +0000 https://vulnerability.circl.lu/sighting/2d12b62f-588d-4c8c-b2db-e6ab17ef315a/export {"uuid": "2d12b62f-588d-4c8c-b2db-e6ab17ef315a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobw3pqbxc2j", "content": "\ud83d\udea8 ALERT: CVE-2026-10187\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\n\n\n\ud83c\udfaf WHO'S AFFECTED:\n \u2022 Unknown\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown vector\nImpact: high impact on confidentiality, integrity, availability\n\n\u2705 WHAT TO DO:\n 1. Check if you're running affected software NOW\n 2. Apply patches immediately ", "creation_timestamp": "2026-06-14T23:24:36.808402Z"} {"uuid": "2d12b62f-588d-4c8c-b2db-e6ab17ef315a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobw3pqbxc2j", "content": "\ud83d\udea8 ALERT: CVE-2026-10187\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\n\n\n\ud83c\udfaf WHO'S AFFECTED:\n \u2022 Unknown\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown vector\nImpact: high impact on confidentiality, integrity, availability\n\n\u2705 WHAT TO DO:\n 1. Check if you're running affected software NOW\n 2. Apply patches immediately ", "creation_timestamp": "2026-06-14T23:24:36.808402Z"} https://vulnerability.circl.lu/sighting/2d12b62f-588d-4c8c-b2db-e6ab17ef315a/export Sun, 14 Jun 2026 23:24:36 +0000