Is CVE-2026-36957 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-36957 being exploited in the wild.

How severe is CVE-2026-36957?

High severity, with a CVSS score of 7.5, published 30 April 2026.

Is there a fix for CVE-2026-36957?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-36957 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-36957?

Check whether you run Dbit N300 T1 Pro, Dbitnet Dbit N300 T1 Pro or Dbitnet Dbit N300 T1 Pro Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-36957: Dbit N300 T1 Pro denial of service in Boa web server

CVE-2026-36957 · Severity: high · CVSS 7.5 · Published 2026-04-30

The Dbit N300 T1 Pro Wi-Fi router is vulnerable to a denial-of-service attack that can completely disable the device. By flooding the router's web management interface with requests for non-existent pages, an attacker can cause the device to freeze or crash. This results in a total loss of internet connectivity for all connected users and requires a manual physical reboot to restore service.

Technologies: Dbitnet Dbit N300 T1 Pro, Dbitnet Dbit N300 T1 Pro Firmware. Vendors: Dbit, Dbitnet.

Quick answers

Is CVE-2026-36957 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-36957 being exploited in the wild.
How severe is CVE-2026-36957?: High severity, with a CVSS score of 7.5, published 30 April 2026.
Which products and versions are affected?: Dbit N300 T1 Pro 1.0.0.
Is there a fix for CVE-2026-36957?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-36957 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-36957?: Check whether you run Dbit N300 T1 Pro, Dbitnet Dbit N300 T1 Pro or Dbitnet Dbit N300 T1 Pro Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A vulnerability in the Boa web server URI handler of the Dbit N300 T1 Pro router (v1.0.0) allows for uncontrolled resource consumption (CWE-400). An unauthenticated remote attacker can initiate a high-volume flood of HTTP GET requests targeting non-existent URIs. This activity exhausts critical system resources, specifically file descriptors and memory buffers, leading to a kernel deadlock or system hang. The exploit results in the failure of both the web management portal and all core routing functions. Recovery requires a manual hardware power cycle. No official patch is currently noted, though remediation suggests implementing rate limiting and watchdog timers.

Affected products

Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router 1.0.0

Timeline

2026-04-29: disclosed: Vulnerability discovered and reported to MITRE
2026-04-30: advisory: NVD published the CVE record

References

https://github.com/kirubel-cve/CVE-2026-36957

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.