Threat database

CVE-2026-7675 is a high-severity buffer overflow vulnerability in Shenzhen Libituo Technology's LBT-T300-HW1 device firmware up to version 1.2.8. The flaw exists in the start_lan function within the /apply.cgi file, where improper handling of the Channel/ApCliSsid argument allows remote attackers to trigger a buffer overflow. The vulnerability can be exploited remotely without user interaction and requires low attack complexity with low privileges. Although the exploit has been publicly disclosed, there is no known exploit activity in the wild. The vendor has not responded to disclosure attempts and no patch or official remediation is currently available.

CVE-2026-7674 is a high-severity buffer overflow vulnerability in the Shenzhen Libituo Technology LBT-T300-HW1 device up to version 1.2.8. The flaw exists in the start_single_service function of the Web Management Interface and can be triggered remotely by manipulating the vpn_pptp_server or vpn_l2tp_server arguments. The vendor has not responded to disclosure attempts, and no patch or official remediation is currently available. The vulnerability has a CVSS 4.0 base score of 8.7, indicating a significant risk if exploited.

A vulnerability was found in Shenzhen Libituo Technology LBT-T300-T310 2.2.3.6. It has been rated as critical. Affected by this issue is the function sub_40B6F0 of the file at/appy.cgi. The manipulation of the argument wan_proto leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

A vulnerability classified as critical has been found in Shenzhen Libituo Technology LBT-T300-T310 up to 2.2.3.6. This affects the function config_3g_para of the file /appy.cgi. The manipulation of the argument username_3g/password_3g leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.