CVE-2026-7749 | Totolink N300RH 3.2.4-B20220812 POST Request /cgi-bin/cstecgi.cgi setWanConfig priDns buffer overflow

A vulnerability has been found in Totolink N300RH 3.2.4-B20220812 and classified as critical. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument priDns leads to buffer overflow.

This vulnerability is listed as CVE-2026-7749. The attack may be initiated remotely. In addition, an exploit is available.