CVE-2026-19814

TOTOLINK A800R device (firmware 4.1.2cu.5137_B20200730) is affected by a stack-based overflow in the firewall.so component’s setMacQos function within /cgi-bin/cstecgi.cgi. The vulnerability arises from manipulating the macAddress argument, enabling a remote attacker to trigger the overflow. Remo...