A newly tracked flaw, CVE-2026-100896, affects the TOTOLINK N150RT router's web management interface, specifically how it handles the wlanif parameter in its Wi-Fi site survey function. Attackers can abuse this weakness remotely to inject operating system commands on the device, and proof-of-concept exploit code is already circulating publicly. Owners of this router model should watch for a vendor patch or isolate the device from untrusted networks in the meantime.
// source: nvd.nist.gov ↗