The vulnerability CVE-2026-75013 affects TOTOLINK EX1200L firmware version 9.3.5u.6146_B20201023. It arises from improper handling in the setWizardCfg function in /cgi-bin/cstecgi.cgi, leading to a null pointer dereference. This can be triggered remotely by an attacker with low privileges and no user interaction, potentially causing denial of service or other impacts related to null pointer dereference. The CVSS v3.1 base score is 7.1, indicating high severity. Public exploit code exists, increasing the risk of exploitation.

Successful exploitation results in a null pointer dereference, which may cause the device to crash or become unresponsive, leading to denial of service. The vulnerability can be triggered remotely without user interaction and requires only low privileges, increasing the attack surface. No evidence of privilege escalation or data compromise is provided in the input data.

No official patch or vendor advisory is provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider limiting remote access to the affected device and monitoring for exploitation attempts given the public availability of exploit code.