CVE-2026-82616

🗓️ 31 Aug 2026 04:45:11Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 38 Views🌐 WEB

Stack-based buffer overflow in TOTOLINK NR1800X cstecgi.cgi setUploadSetting via FileName argument.

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2026-82616	31 Aug 202605:20	–	circl
Cvelist	CVE-2026-82616 TOTOLINK NR1800X cstecgi.cgi setUploadSetting stack-based overflow	31 Aug 202604:45	–	cvelist
EUVD	EUVD-2026-68353	31 Aug 202604:45	–	euvd
NVD	CVE-2026-82616	31 Aug 202605:17	–	nvd
Positive Technologies	PT-2026-83697	31 Aug 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-82616: Stack-based Buffer Overflow	31 Aug 202600:00	–	rapid7
Vulnrichment	CVE-2026-82616 TOTOLINK NR1800X cstecgi.cgi setUploadSetting stack-based overflow	31 Aug 202604:45	–	vulnrichment

Vulners

Node

totolink nr1800xMatch9.1.0u.6681_b20230703

[
  {
    "vendor": "TOTOLINK",
    "product": "NR1800X",
    "versions": [
      {
        "version": "9.1.0u.6681_B20230703",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:o:totolink:nr1800x_firmware:*:*:*:*:*:*:*:*"
    ]
  }
]

Source	Link
totolink	www.totolink.net/
vuldb	www.vuldb.com/submit/892941
vuldb	www.vuldb.com/cve/CVE-2026-82616
vuldb	www.vuldb.com/vuln/397117/cti
github	www.github.com/lxiansheng488-bit/-/blob/main/TOTOlink/totolink%20setUploadSetting%E6%A0%88%E6%BA%A2%E5%87%BA.pdf
vuldb	www.vuldb.com/vuln/397117

Parameter	Position	Path	Description	CWE
FileName	request body	/cgi-bin/cstecgi.cgi	Remote stack-based buffer overflow triggered by manipulating the FileName argument in the setUploadSetting function of /cgi-bin/cstecgi.cgi.	CWE-119, CWE-121

01 Sep 2026 19:17Current

8.5High risk

Vulners AI Score8.5

CVSS 29

CVSS 49.4

CVSS 3.19.9

CVSS 39.9

EPSS0.00854

SSVC