CVE-2026-75012 is a high-severity vulnerability affecting TOTOLINK EX1200L version 9.3.5u.6146_B20201023. The issue arises from a null pointer dereference in the setPasswordCfg function within the /cgi-bin/cstecgi.cgi password configuration handler. The vulnerability can be exploited remotely without authentication or user interaction. Public exploit details have been disclosed, but there is no indication of active exploitation in the wild. The CVSS 3.1 base score is 7.1, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on availability.

Successful exploitation of this vulnerability can cause a null pointer dereference, likely resulting in denial of service or crash of the affected device. This can disrupt normal operation of the TOTOLINK EX1200L router. No direct data confidentiality or integrity impacts are described.

No official patch or remediation information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider limiting remote access to the affected device's management interface to trusted networks only.