CVE-2025-5901

TOTOLINK T10 (version 4.1.8cu.5207) is affected by a buffer overflow in the UploadCustomModule function of /cgi-bin/cstecgi.cgi (POST handler). The File parameter manipulation can be exploited remotely; public exploit activity is indicated. Multiple sources corroborate a high-severity, network-ex...