MINI-2XQP-2P4C-J3MM

Bulletin has no description...

CVE-2026-49263 Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization

Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes through the public csdisasm and csdisasmiter APIs. For a large but well-formed brtable instruction, the WASM decoder accumulates the immediate...

MINI-HC83-84PM-QJ9Q

Bulletin has no description...

MINI-26JV-7GWW-FPCC

Bulletin has no description...

MINI-P5VM-J2QP-9Q9F

Bulletin has no description...

MINI-PV47-VC64-M2PF

Bulletin has no description...

MINI-8R68-2CH2-M7XH

Bulletin has no description...

MINI-7M47-CQX6-J3FG

Bulletin has no description...

MINI-VC5M-MQQH-HRF2

Bulletin has no description...

MINI-CRRX-MJH8-MG7M

Bulletin has no description...

MINI-7P7G-54X9-XQXJ

Bulletin has no description...

CVE-2026-19847

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137B20200730. Affected is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component wps.so. The manipulation of the argument pin results in stack-based buffer overflow. The attack can be launched remotely. The...

EUVD-2026-58739

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137B20200730. Affected is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component wps.so. The manipulation of the argument pin results in stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2026-19847 TOTOLINK A800R wps.so cstecgi.cgi setWiFiWpsConfig stack-based overflow

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137B20200730. Affected is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component wps.so. The manipulation of the argument pin results in stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2026-19847

TOTOLINK A800R (firmware 4.1.2cu.5137_B20200730) contains a vulnerability in wps.so: the setWiFiWpsConfig function in /cgi-bin/cstecgi.cgi accepts a pin argument whose manipulation causes a stack-based buffer overflow. The issue can be triggered remotely, and public exploits have been released. T...

CVE-2026-19844

A vulnerability was found in TOTOLINK A800R 4.1.2cu.5137B20200730. The impacted element is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component ipv6.so. Performing a manipulation of the argument radvdinterfacename results in stack-based buffer overflow. It is possible to...

CVE-2026-19845

A vulnerability was determined in TOTOLINK A800R 4.1.2cu.5137B20200730. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. Executing a manipulation of the argument Comment can lead to stack-based buffer overflow. It is possible to launch the...

CVE-2026-19846 TOTOLINK A800R firewall.so cstecgi.cgi setUrlFilterRules stack-based overflow

A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The...

EUVD-2026-58735

A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The...

CVE-2026-19846

TOTOLINK A800R vulnerability (CVE-2026-19846) affects the firewall.so component via setUrlFilterRules in /cgi-bin/cstecgi.cgi. The argument url can be manipulated to cause a stack-based buffer overflow, with remote exploitation possible. Public exploit appears to be available. Affected version: T...