<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-12T21:05:11.289281+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/20a4c11c-f6c5-4343-ba22-66a81b1aadaa/export</id>
    <title>20a4c11c-f6c5-4343-ba22-66a81b1aadaa</title>
    <updated>2026-06-12T21:05:11.303959+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "20a4c11c-f6c5-4343-ba22-66a81b1aadaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mn625ab7aw26", "content": "\ud83d\udd34 CVE-2026-10187 - Critical (9.8)\n\nA vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10187/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-31T17:01:13.156210Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/20a4c11c-f6c5-4343-ba22-66a81b1aadaa/export"/>
    <published>2026-05-31T17:01:13.156210+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6fc22285-711c-49e4-95a7-608207c9cfd7/export</id>
    <title>6fc22285-711c-49e4-95a7-608207c9cfd7</title>
    <updated>2026-06-12T21:05:11.303885+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6fc22285-711c-49e4-95a7-608207c9cfd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn64bzog7u2m", "content": "CVE-2026-10187 - Totolink N300RH Web Management wireless.so setWiFiBasicConfig stack-based overflow\nCVE ID : CVE-2026-10187\n \n Published : May 31, 2026, 3:16 p.m. | 1\u00a0hour, 56\u00a0minutes ago\n \n Description : A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Aff...", "creation_timestamp": "2026-05-31T17:39:40.737156Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6fc22285-711c-49e4-95a7-608207c9cfd7/export"/>
    <published>2026-05-31T17:39:40.737156+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a3cccaac-1472-46a6-b9cf-21715a42356c/export</id>
    <title>a3cccaac-1472-46a6-b9cf-21715a42356c</title>
    <updated>2026-06-12T21:05:11.303803+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a3cccaac-1472-46a6-b9cf-21715a42356c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mn65zmzjvd25", "content": "CVE-2026-10187 - Critical stack buffer overflow in Totolink N300RH. Remote RCE via KeyStr argument. CVSS 9.8. Exploit public, no patch available. Disable remote management immediately. #CVE #IoT #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-10187/", "creation_timestamp": "2026-05-31T18:10:46.593612Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a3cccaac-1472-46a6-b9cf-21715a42356c/export"/>
    <published>2026-05-31T18:10:46.593612+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f42d5c7d-820c-4296-af34-15790b19a240/export</id>
    <title>f42d5c7d-820c-4296-af34-15790b19a240</title>
    <updated>2026-06-12T21:05:11.303668+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f42d5c7d-820c-4296-af34-15790b19a240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10187", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116671908120912693", "content": "\u26a0\ufe0f CVE-2026-10187 CRITICAL: Totolink N300RH (6.1c.1353_B20190305) is exposed to a remote stack-based buffer overflow in setWiFiBasicConfig. Exploit is public, no patch yet \u2014 restrict Web Management access! https://radar.offseq.com/threat/cve-2026-10187-stack-based-buffer-overflow-in-toto-571e12d5 #OffSeq #IoT #Infosec #Vuln", "creation_timestamp": "2026-06-01T00:00:36.965328Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f42d5c7d-820c-4296-af34-15790b19a240/export"/>
    <published>2026-06-01T00:00:36.965328+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/94a56039-01a9-42f6-8da9-dd193b4e112a/export</id>
    <title>94a56039-01a9-42f6-8da9-dd193b4e112a</title>
    <updated>2026-06-12T21:05:11.303539+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "94a56039-01a9-42f6-8da9-dd193b4e112a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10187", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mn6rl7xohh2r", "content": "CRITICAL: Totolink N300RH routers (6.1c.1353_B20190305) face remote stack overflow (CVE-2026-10187). Exploit is public! Restrict Web Management ASAP until patch arrives. https://radar.offseq.com/threat/cve-2026-10187-stack-based-buffer-overflow-in-toto-571e12d5 #OffSeq #IoTSecurity #Vulnerability", "creation_timestamp": "2026-06-01T00:00:38.122362Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/94a56039-01a9-42f6-8da9-dd193b4e112a/export"/>
    <published>2026-06-01T00:00:38.122362+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0cde025a-5786-4e3d-9246-9d05805604ec/export</id>
    <title>0cde025a-5786-4e3d-9246-9d05805604ec</title>
    <updated>2026-06-12T21:05:11.303411+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0cde025a-5786-4e3d-9246-9d05805604ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "Telegram/mH9Q0epJCMco7b4Phu2MaoIM6BdP5uO09lWAriMT8ef_Xxw", "content": "", "creation_timestamp": "2026-06-03T11:00:12.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0cde025a-5786-4e3d-9246-9d05805604ec/export"/>
    <published>2026-06-03T11:00:12+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6c50d756-b1bf-41cc-a11d-1ff01c6efb76/export</id>
    <title>6c50d756-b1bf-41cc-a11d-1ff01c6efb76</title>
    <updated>2026-06-12T21:05:11.303290+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6c50d756-b1bf-41cc-a11d-1ff01c6efb76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "Telegram/5KTwmA96Kj45TkZqBYLm7RQJ-3Dt3Yk-Ro8oNdfED5lawJI", "content": "", "creation_timestamp": "2026-06-03T15:00:06.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6c50d756-b1bf-41cc-a11d-1ff01c6efb76/export"/>
    <published>2026-06-03T15:00:06+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/97fff232-8610-451a-83ce-6d56ed896029/export</id>
    <title>97fff232-8610-451a-83ce-6d56ed896029</title>
    <updated>2026-06-12T21:05:11.303166+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "97fff232-8610-451a-83ce-6d56ed896029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo4hkmfejb2g", "content": "\ud83d\udea8 CRITICAL: CVE-2026-10187 \u2014 CVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nTotolink N300RH \u2014 Stack-based buffer overflow in setWiFiBasicConfig (wireless.so). Crafted KeyStr argument triggers overflow in web management interface. Full router compromise.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Totolink N300RH\n  \u2022 SOHO Routers\n\n\u2694\ufe0f HOW IT", "creation_timestamp": "2026-06-12T19:21:12.094116Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/97fff232-8610-451a-83ce-6d56ed896029/export"/>
    <published>2026-06-12T19:21:12.094116+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d5dabaf6-9497-4a55-b7ee-2480f630405b/export</id>
    <title>d5dabaf6-9497-4a55-b7ee-2480f630405b</title>
    <updated>2026-06-12T21:05:11.303005+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d5dabaf6-9497-4a55-b7ee-2480f630405b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo4hoksxsg2j", "content": "\ud83d\udea8 CRITICAL: CVE-2026-10187\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 enterprise systems\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack: remotely over the ne", "creation_timestamp": "2026-06-12T19:23:24.422104Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d5dabaf6-9497-4a55-b7ee-2480f630405b/export"/>
    <published>2026-06-12T19:23:24.422104+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2cab2bfa-3167-4f6a-b85d-8b85bc4474c6/export</id>
    <title>2cab2bfa-3167-4f6a-b85d-8b85bc4474c6</title>
    <updated>2026-06-12T21:05:11.300965+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2cab2bfa-3167-4f6a-b85d-8b85bc4474c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10187", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo4hqj7ezv2y", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-10187\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Management Interface. Performing a manipulation of the argument Key", "creation_timestamp": "2026-06-12T19:24:30.300956Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2cab2bfa-3167-4f6a-b85d-8b85bc4474c6/export"/>
    <published>2026-06-12T19:24:30.300956+00:00</published>
  </entry>
</feed>
