CVE-2026-36957 describes a Denial of Service vulnerability in the boa web server URI handler of the Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0. The vulnerability is triggered by flooding the router with HTTP GET requests targeting non-existent URIs, which exhausts critical system resources including file descriptors and memory buffers. This exhaustion causes a kernel deadlock or system hang, resulting in the unavailability of the router's web management portal and its routing capabilities. No CVSS score or remediation information is provided, and no known exploits have been reported.

Successful exploitation results in a denial of service condition that disables the router's web management portal and all routing functions, effectively rendering the device inoperable until reboot or manual intervention. This can disrupt network connectivity and management.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, network administrators should consider limiting access to the router's management interface from untrusted networks and monitor for unusual HTTP request patterns targeting non-existent URIs to reduce risk.