PT-2026-36673 · Shenzhen Libituo Technology Co. · Lbt-T300-Hw1

Kunlun · Published 2026-05-03 · Updated 2026-05-03 · CVE-2026-7674

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Shenzhen Libituo Technology LBT-T300-HW1 versions prior to 1.2.8

Description A buffer overflow exists in the Web Management Interface component. A remote attacker can trigger this issue by manipulating the vpn pptp server or vpn l2tp server arguments within the start single service() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2026-7674

Affected Products

Lbt-T300-Hw1

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-7674 · Security Note
• https://twitter.com/VulmonFeeds/status/2050765990795858355 · Twitter Post
• https://vuldb.com/vuln/360827 · Note
• https://vuldb.com/submit/800705 · Note
• https://github.com/hmKunlun/lbt-t300-hw1/blob/main/reselov_vpn_server%EF%BC%88vpn_pptp_server%EF%BC%89.md · Note
• https://vuldb.com/submit/800706 · Note
• https://vuldb.com/vuln/360827/cti · Note