CVE•Published 2026-05-04•Modified 2026-05-04•1 article on news•5 live references•NVD data
CVE-2026-7748
Vulnerability data via NVD (ingested)
CVSS v3.1
8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS percentile
—
Weaknesses (CWE)
Description
A weakness has been identified in Totolink N300RH 3.2.4-B20220812. Affected by this issue is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Executing a manipulation of the argument FileName can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Timeline
Published 2026-05-04
Modified 2026-05-04
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
More intel sources (5)
Shodan report
vuln:CVE-2026-7748Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2026-7748Censys host search filtered to this CVE id.
grep.app
CVE-2026-7748Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2026-7748GitHub code search for direct mentions.
Google dork
"CVE-2026-7748" exploit -site:nvd.nist.govWrite-ups and news, NVD excluded.
Known PoCs on GitHub (8)
CVE-2026-77488 repos
wolfSSL/wolfsslC
The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 fo…
jdrains110-beep/Triumph-Synergy-Digital-Financial-EcosystemTypeScript
Quantum Financial System (QFS) built on Pi Network - Quantum-resistant cryptography (Kyber/Dilithium), Supabase RLS + Realtime, Pi SDK 2.0 payments, Fast-Track KYC/KYB, PiRC Protoc…
systemslibrarian/crypto-labHTML
Crypto Lab is a free, browser-based cryptography teaching collection: interactive demonstrations spanning classical cryptography, modern protocols, cryptanalysis, privacy technolog…
nahuellamas/latticeshieldRust
proxy cuantico
Supermagnum/Galdralag-firmwareRust
A cryptographic framework for Baochip-1x .
angeawalabj/bouclier-numeriquePython
Le Bouclier Numérique est un challenge de sécurité informatique pratique : un outil fonctionnel, documenté et prêt à l'emploi, chaque jour pendant 30 jours. Chaque outil répond à u…
md6ba/sec_standardsHTML
Security Standards Knowledge Base — authoritative collection of NIST, IETF, OWASP, and other security standards for building security-sensitive software.
ahmedkobbi/verifaceTypeScript
VeriFace Edge — Privacy-first facial authentication SaaS. 100% on-device biometric computation (WebGPU/WASM) with zero-knowledge cryptographic commitments. Multi-platform SDK (Web,…