CVE-2026-19813 TOTOLINK A800R firewall.so cstecgi.cgi setMacFilterRules stack-based overflow

A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Such manipulation of the argument Comment leads to stack-based buffer overflow. The attack may be performe...

CVE-2026-19813 TOTOLINK A800R firewall.so cstecgi.cgi setMacFilterRules stack-based overflow

A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Such manipulation of the argument Comment leads to stack-based buffer overflow. The attack may be performe...

CVE-2026-19813

CVE-2026-19813 affects TOTOLINK A800R (firmware 4.1.2cu.5137_B20200730) in the firewall.so component, specifically the setMacFilterRules function in /cgi-bin/cstecgi.cgi. The issue is a stack-based buffer overflow caused by manipulation of the Comment argument, allowing a remote attacker to explo...

CVE-2026-19812

CVE-2026-19812 affects TOTOLINK A800R (version 4.1.2cu.5137_B20200730) in the file path product.so, function UploadCustomModule. The issue is a stack-based buffer overflow caused by manipulation of the argument File in /cgi-bin/cstecgi.cgi. This vulnerability enables remote exploitation (network ...

CVE-2026-19812 TOTOLINK A800R product.so cstecgi.cgi UploadCustomModule stack-based overflow

A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based buffer overflow. The attack is possible to be carried out...

CVE-2026-19812 TOTOLINK A800R product.so cstecgi.cgi UploadCustomModule stack-based overflow

A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based buffer overflow. The attack is possible to be carried out...

CVE-2026-19811 TOTOLINK A800R firewall.so cstecgi.cgi setIpQosRules stack-based overflow

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137B20200730. The impacted element is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument Comment results in stack-based buffer overflow. The attack can be execute...

CVE-2026-19811

TOTOLINK A800R devices running 4.1.2cu.5137_B20200730 are affected by a stack-based buffer overflow in the firewall.so module, specifically the function setIpQosRules in /cgi-bin/cstecgi.cgi. The vulnerability is triggered by manipulating the Comment argument, allowing a remote attacker to exploi...

CVE-2026-19811 TOTOLINK A800R firewall.so cstecgi.cgi setIpQosRules stack-based overflow

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137B20200730. The impacted element is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument Comment results in stack-based buffer overflow. The attack can be execute...

CVE-2026-19845: Stack-based Buffer Overflow

A vulnerability was determined in TOTOLINK A800R 4.1.2cu.5137B20200730. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. Executing a manipulation of the argument Comment can lead to stack-based buffer overflow. It is possible to launch the...

PT-2026-71972

A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137 B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based buffer overflow. The attack is possible to be carried out...

CVE-2026-19811: Stack-based Buffer Overflow

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137B20200730. The impacted element is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument Comment results in stack-based buffer overflow. The attack can be execute...

PT-2026-72061

Name of the Vulnerable Software and Affected Versions TOTOLINK A800R version 4.1.2cu.5137 B20200730 Description A stack-based buffer overflow exists in the setRadvdCfg function within the /cgi-bin/cstecgi.cgi file of the ipv6.so component. This issue can be triggered remotely by manipulating the...

PT-2026-72071

Name of the Vulnerable Software and Affected Versions TOTOLINK A800R version 4.1.2cu.5137 B20200730 Description A stack-based buffer overflow occurs when manipulating the pin argument within the setWiFiWpsConfig function of the /cgi-bin/cstecgi.cgi endpoint, located in the wps.so component. This...

PT-2026-72062

A vulnerability was determined in TOTOLINK A800R 4.1.2cu.5137 B20200730. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. Executing a manipulation of the argument Comment can lead to stack-based buffer overflow. It is possible to launch the...

totolink-exploit

Totolink N200RS+ / A3002RU RCE Exploit Command injection in c...

Exploit for CVE-2026-82539

CVE-2026-82539 Submitter: Nicola Giuffrida Information...

EUVD-2026-42660

A vulnerability was detected in TOTOLINK X5000R 9.1.0cu.2415B20250515/9.1.0cu.2350B20230313. Affected by this vulnerability is the function exportOvpn of the file /web/cgi-bin/cstecgi.cgi of the component OpenVPN Export. The manipulation results in path traversal. The attack may be launched...

PT-2026-56891

A vulnerability was detected in TOTOLINK X5000R 9.1.0cu.2415 B20250515/9.1.0cu.2350 B20230313. Affected by this vulnerability is the function exportOvpn of the file /web/cgi-bin/cstecgi.cgi of the component OpenVPN Export. The manipulation results in path traversal. The attack may be launched...

The vulnerability of the setSyslogCfg() function in the /cgi-bin/cstecgi.cgi script of the TOTOLINK A3300R router’s microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the setSyslogCfg function in the /cgi-bin/cstecgi.cgi script of the TOTOLINK A3300R router’s microprogramming system is related to the failure to take measures to neutralize special elements during the processing of the provided parameter. Exploiting this vulnerability allows...