Home / Vulnerability Intelligence / CVE-2026-36956

CVE-2026-36956 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: April 30, 2026

Dbit N300 T1 Pro - Cross-Site Request Forgery

Published: April 30, 2026Updated: April 30, 2026PoC AvailableRemote Exploitable

Overview

Dbit N300 T1 Pro wireless router V1.0.0 contains a cross-site request forgery caused by lack of anti-CSRF tokens or strict Origin/Referer validation in administrative API endpoints, letting attackers force authenticated administrators to perform unintended actions.

Severity & Score

Severity: High

CVSS Score: 8.8

Impact

Attackers can force authenticated administrators to perform unauthorized configuration changes, potentially compromising router security.

Mitigation

Update to the latest firmware version with proper CSRF protections.

References

Related Resources

Details

CVE ID: CVE-2026-36956
Severity: High
CVSS Score: 8.8
Type: cross_site_request_forgery
Status: unconfirmed

CWE

CWE-352

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H