CVE-2026-7747 | Totolink N300RH 3.2.4-B20220812 Parameter /cgi-bin/cstecgi.cgi loginauth Password buffer overflow

A vulnerability, which was classified as critical, has been found in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. Performing a manipulation of the argument Password results in buffer overflow.

This vulnerability is identified as CVE-2026-7747. The attack can be initiated remotely. Additionally, an exploit exists.