CVE-2026-7675
published 2026-05-03CVE-2026-7675: A vulnerability has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. Impacted is the function start_lan of the file /apply.cgi. The…
PriorityP265high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.70%
48.6th percentile
A vulnerability has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. Impacted is the function start_lan of the file /apply.cgi. The manipulation of the argument Channel/ApCliSsid leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| shenzhen_libituo_technology | lbt-t300-hw1 | — | — |
| shenzhen_libituo_technology | lbt-t300-hw1 | — | — |
| shenzhen_libituo_technology | lbt-t300-hw1 | — | — |
| shenzhen_libituo_technology | lbt-t300-hw1 | — | — |
| shenzhen_libituo_technology | lbt-t300-hw1 | — | — |
| shenzhen_libituo_technology | lbt-t300-hw1 | — | — |
| shenzhen_libituo_technology | lbt-t300-hw1 | — | — |
| shenzhen_libituo_technology | lbt-t300-hw1 | — | — |
| shenzhen_libituo_technology | lbt-t300-hw1 | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv4.07.4HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-pwrq-xrfc-p2rq: A vulnerability has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1
ghsa_unreviewed·2026-05-03
CVE-2026-7675 [HIGH] CWE-119 GHSA-pwrq-xrfc-p2rq: A vulnerability has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1
A vulnerability has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. Impacted is the function start_lan of the file /apply.cgi. The manipulation of the argument Channel/ApCliSsid leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
VulDB
Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8 /apply.cgi start_lan Channel/ApCliSsid buffer overflow
vuldb·2026-05-02
CVE-2026-7675 [CRITICAL] Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8 /apply.cgi start_lan Channel/ApCliSsid buffer overflow
A vulnerability was found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. It has been classified as critical. Impacted is the function start_lan of the file /apply.cgi. The manipulation of the argument Channel/ApCliSsid leads to buffer overflow.
This vulnerability is uniquely identified as CVE-2026-7675. The attack is possible to be carried out remotely. Moreover, an exploit is present.
The vendor was contacted early about this disclosure but did not respond in any way.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-05-03
Published