{"vulnerability": "CVE-2026-100896", "sightings": [{"uuid": "5bd038d5-426d-4734-ba9c-1f57ae29b6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117342124693395134", "content": "There is a new vulnerability with elevated criticality in TOTOLINK N150RT (CVE-2026-100896) https://vuldb.com/vuln/410846", "creation_timestamp": "2026-09-27T08:45:29.305177Z"}, {"uuid": "ed767aad-b933-4939-80f5-34727123e851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwkau5upbx26", "content": "CVE-2026-100896 - n150rt\nThe web admin page on TOTOLINK N150RT routers can be tricked into running system commands. An attacker who accesses the router\u2019s management interface could execute unwanted actions\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#n150rt #totolink #CVE #infosec", "creation_timestamp": "2026-09-28T02:20:05.543370Z"}, {"uuid": "98c61de7-3fd0-409d-bcbe-0b05827959f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwkbh6shlk27", "content": "\ud83d\udd34 CVE-2026-100896 - Critical (9.9)\n\nA weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the fu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100896/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T02:30:47.217858Z"}, {"uuid": "cb4817db-a90d-4f29-b08b-9a95c9175617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100896", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117346430231490086", "content": "TOTOLINK N150RT v3.4.0-B20201030 is vulnerable (CVE-2026-100896, CVSS 9.4): CRITICAL OS command injection in Web UI. Public exploit out, no patch yet. Restrict mgmt access & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-100896-os-command-injection-in-totolink-n150rt-29dd6473e6a24e03 #OffSeq #CVE2026100896 #infosec #router", "creation_timestamp": "2026-09-28T03:00:26.896488Z"}, {"uuid": "3d68eca7-9b24-4da2-bd1c-076ff331cfc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100896", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwkd4ek2bt22", "content": "TOTOLINK N150RT v3.4.0-B20201030 faces CRITICAL OS command injection (CVE-2026-100896, CVSS 9.4) \u26a0\ufe0f. Public exploit exists \u2014 restrict mgmt interface & check for updates. No patch yet. https://radar.offseq.com/threat/cve-2026-100896-os-command-injection-in-totolink-n150rt-29dd6473e6a24e03 #OffSeq ...", "creation_timestamp": "2026-09-28T03:00:29.092995Z"}, {"uuid": "f8104a4e-630b-4fd8-99f6-4bc47fb67f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100896", "type": "seen", "source": "https://gist.github.com/ichintu/e77ad87ce7c2605a3295aca992dad2d4", "content": "CVE-2026-100896 is a critical (CVSS 9.9) OS command injection vulnerability affecting the TOTOLINK N150RT router (firmware 3.4.0-B20201030). It targets the web management interface via the `wlanif` parameter, enabling remote command execution. A public exploit has already been released.", "creation_timestamp": "2026-09-28T04:00:27.000000Z"}]}