Threat database

A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. Impacted is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.

CVE-2026-82597 is a command injection vulnerability in the TOTOLINK NR1800X router firmware version 9.1.0u.6681_B20230703. The flaw exists in the setUssd function within the /cgi-bin/cstecgi.cgi file, where manipulation of the 'ussd' argument allows remote attackers to execute arbitrary commands. Exploit code is publicly available, but no official patch or remediation guidance has been provided yet. The vulnerability has a medium severity rating with a CVSS 4.0 score of 5.3.

CVE-2026-82555 is a medium severity vulnerability in TOTOLINK N600R version 4.3.0cu.7866_B20220506. It involves insufficiently random values generated by the loginAuth function in the Authentication Handler component, which can be exploited remotely. The attack complexity is high and exploitability is difficult. Public exploit code has been disclosed, but no official patch or remediation guidance is currently available.

A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2026-79912 is a command injection vulnerability in the TOTOLINK N600R router, specifically in version 4.3.0cu.7647_B20210106. The flaw exists in the getCurrentTime function of the /cgi-bin/cstecgi.cgi file, where manipulation of the ntp_server argument can lead to remote command injection. Exploit code is publicly available, but no official patch or remediation guidance has been provided by the vendor as of the publication date. The vulnerability has a medium severity rating with a CVSS score of 6.9.

A critical stack-based buffer overflow vulnerability exists in the TOTOLINK N600R router, version 4.3.0cu.7647_B20210106. The flaw is in the setSystemConfig function within the /cgi-bin/cstecgi.cgi CGI Handler component. Remote attackers can exploit this by manipulating the Hostname argument. The vulnerability has a maximum CVSS score of 10. Public exploit code is available, but no official patch or remediation guidance has been provided yet.

CVE-2026-75013 is a high-severity vulnerability affecting TOTOLINK EX1200L version 9.3.5u.6146_B20201023. It is caused by a null pointer dereference in the setWizardCfg function within the /cgi-bin/cstecgi.cgi file. This vulnerability can be exploited remotely without user interaction, requiring low attack complexity and low privileges. Public exploit code is available. No patch or official fix information is currently provided.

A null pointer dereference vulnerability exists in the TOTOLINK EX1200L router version 9.3.5u.6146_B20201023. The flaw is located in the setPasswordCfg function of the /cgi-bin/cstecgi.cgi component, which handles password configuration. This vulnerability can be triggered remotely without user interaction and has a high severity rating. Public exploit code has been disclosed, increasing the risk of exploitation.

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component wps.so. The manipulation of the argument pin results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used.

A vulnerability was determined in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. Executing a manipulation of the argument Comment can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability was found in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted element is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component ipv6.so. Performing a manipulation of the argument radvdinterfacename results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

A flaw has been found in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected by this vulnerability is the function setParentalRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Executing a manipulation of the argument urlKeyword can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.

CVE-2026-19814 is a stack-based buffer overflow vulnerability in the TOTOLINK A800R router firmware version 4.1.2cu.5137_B20200730. The flaw exists in the setMacQos function within the /cgi-bin/cstecgi.cgi file of the firewall.so component. An attacker can remotely exploit this vulnerability by manipulating the macAddress argument, potentially leading to code execution or denial of service. Exploit code is publicly available, increasing the risk of exploitation. No official patch or remediation guidance has been provided by the vendor as of the publication date.

A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Such manipulation of the argument Comment leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.