CVE-2026-3696 | Totolink N300RH 6..1c.1353_B20190305 CGI /cgi-bin/cstecgi.cgi setWiFiWpsConfig os command injection

A vulnerability was found in Totolink N300RH 6..1c.1353_B20190305. It has been classified as critical. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation results in os command injection.

This vulnerability is identified as CVE-2026-3696. The attack can be initiated remotely. Additionally, an exploit exists.