CVE-2026-36957: High severity Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router vulnerability

Published Apr 30, 2026

Updated

Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI handler. By initiating a high-volume flood of HTTP GET requests to non-existent URIs, an attacker can exhaust critical system resources, including file descriptors and memory buffers. This results in a kernel deadlock or system hang that disables the web management portal and all routing capabilities.

Affected Software

3 affected components

Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router=1.0.0

All of the following

Dbitnet Dbit N300 T1 Pro Firmware=1.0.0

Dbitnet Dbit N300 T1 Pro

Event History

Apr 30, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-36957?

CVE-2026-36957 is classified as a high severity vulnerability due to its potential to cause Denial of Service.

How do I fix CVE-2026-36957?

To mitigate CVE-2026-36957, updating the Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router to a patched version and restricting excessive HTTP GET requests is recommended.

What does CVE-2026-36957 affect?

CVE-2026-36957 specifically affects Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router version 1.0.0.

What type of attack is associated with CVE-2026-36957?

CVE-2026-36957 is associated with a Denial of Service attack that targets the boa web server.

Can CVE-2026-36957 be exploited remotely?

Yes, CVE-2026-36957 can be exploited remotely by an attacker capable of sending high-volume HTTP GET requests to the vulnerable router.