CVE-2026-114382

🗓️ 21 Oct 2026 21:30:10Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 39 Views🌐 WEB

Remote stack-based overflow in TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig.

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2026-114382	21 Oct 202621:41	–	circl
CNNVD	TOTOLINK EX200 buffer error vulnerability	20 Oct 202616:00	–	cnnvd
Cvelist	CVE-2026-114382 TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow	21 Oct 202621:30	–	cvelist
EUVD	EUVD-2026-107579	22 Oct 202600:31	–	euvd
NVD	CVE-2026-114382	21 Oct 202622:16	–	nvd
Positive Technologies	PT-2026-120836	21 Oct 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-114382 TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow	21 Oct 202621:30	–	vulnrichment

Vulners

Node

totolink ex200Match5.2.3c.7200

[
  {
    "vendor": "TOTOLINK",
    "product": "EX200",
    "versions": [
      {
        "version": "5.2.3c.7200",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:o:totolink:ex200_firmware:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "lan.so"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/vuln/424741
vuldb	www.vuldb.com/vuln/424741/cti
totolink	www.totolink.net/
vuldb	www.vuldb.com/submit/1019881
github	www.github.com/qwq-nm/CVE/blob/f5d61361eb7d846479f6d76c0aa4273e9af46d27/CVE1/report.md
vuldb	www.vuldb.com/cve/CVE-2026-114382

Parameter	Position	Path	Description	CWE
Comment	request body	/cgi-bin/cstecgi.cgi	A stack-based buffer overflow exists in the setStaticDhcpConfig function of /cgi-bin/cstecgi.cgi when processing the Comment argument.	CWE-119, CWE-121

28 Oct 2026 02:17Current

9Critical risk

Vulners AI Score9

CVSS 410

CVSS 3.110

CVSS 310

CVSS 210

EPSS0.00667

SSVC