https://vulnerability.circl.lu/sightings/feed 2026-09-29T00:00:21.190626+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/f8104a4e-630b-4fd8-99f6-4bc47fb67f9b/export 2026-09-29T00:00:21.221304+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f8104a4e-630b-4fd8-99f6-4bc47fb67f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://gist.github.com/ichintu/e77ad87ce7c2605a3295aca992dad2d4", "content": "CVE-2026-100896 is a critical (CVSS 9.9) OS command injection vulnerability affecting the TOTOLINK N150RT router (firmware 3.4.0-B20201030). It targets the web management interface via the `wlanif` parameter, enabling remote command execution. A public exploit has already been released.", "creation_timestamp": "2026-09-28T04:00:27.000000Z"} 2026-09-28T04:00:27+00:00 https://vulnerability.circl.lu/sighting/3d68eca7-9b24-4da2-bd1c-076ff331cfc6/export 2026-09-29T00:00:21.223445+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3d68eca7-9b24-4da2-bd1c-076ff331cfc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100896", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwkd4ek2bt22", "content": "TOTOLINK N150RT v3.4.0-B20201030 faces CRITICAL OS command injection (CVE-2026-100896, CVSS 9.4) \u26a0\ufe0f. Public exploit exists \u2014 restrict mgmt interface & check for updates. No patch yet. https://radar.offseq.com/threat/cve-2026-100896-os-command-injection-in-totolink-n150rt-29dd6473e6a24e03 #OffSeq ...", "creation_timestamp": "2026-09-28T03:00:29.092995Z"} 2026-09-28T03:00:29.092995+00:00 https://vulnerability.circl.lu/sighting/cb4817db-a90d-4f29-b08b-9a95c9175617/export 2026-09-29T00:00:21.223611+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cb4817db-a90d-4f29-b08b-9a95c9175617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100896", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117346430231490086", "content": "TOTOLINK N150RT v3.4.0-B20201030 is vulnerable (CVE-2026-100896, CVSS 9.4): CRITICAL OS command injection in Web UI. Public exploit out, no patch yet. Restrict mgmt access & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-100896-os-command-injection-in-totolink-n150rt-29dd6473e6a24e03 #OffSeq #CVE2026100896 #infosec #router", "creation_timestamp": "2026-09-28T03:00:26.896488Z"} 2026-09-28T03:00:26.896488+00:00 https://vulnerability.circl.lu/sighting/98c61de7-3fd0-409d-bcbe-0b05827959f7/export 2026-09-29T00:00:21.223730+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "98c61de7-3fd0-409d-bcbe-0b05827959f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwkbh6shlk27", "content": "\ud83d\udd34 CVE-2026-100896 - Critical (9.9)\n\nA weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the fu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100896/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T02:30:47.217858Z"} 2026-09-28T02:30:47.217858+00:00 https://vulnerability.circl.lu/sighting/ed767aad-b933-4939-80f5-34727123e851/export 2026-09-29T00:00:21.223801+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ed767aad-b933-4939-80f5-34727123e851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwkau5upbx26", "content": "CVE-2026-100896 - n150rt\nThe web admin page on TOTOLINK N150RT routers can be tricked into running system commands. An attacker who accesses the router\u2019s management interface could execute unwanted actions\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#n150rt #totolink #CVE #infosec", "creation_timestamp": "2026-09-28T02:20:05.543370Z"} 2026-09-28T02:20:05.543370+00:00 https://vulnerability.circl.lu/sighting/5bd038d5-426d-4734-ba9c-1f57ae29b6ec/export 2026-09-29T00:00:21.223866+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5bd038d5-426d-4734-ba9c-1f57ae29b6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117342124693395134", "content": "There is a new vulnerability with elevated criticality in TOTOLINK N150RT (CVE-2026-100896) https://vuldb.com/vuln/410846", "creation_timestamp": "2026-09-27T08:45:29.305177Z"} 2026-09-27T08:45:29.305177+00:00