EUVD-2026-107581

A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This manipulation of the argument macAddress causes stack-based buffer overflow. The attack can be initiated remotely. The...

EUVD-2026-107579

A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based buffer overflow. It is possible to launch the attack remotely...

CVE-2026-114383

A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This manipulation of the argument macAddress causes stack-based buffer overflow. The attack can be initiated remotely. The...

CVE-2026-114382

A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based buffer overflow. It is possible to launch the attack remotely...

CVE-2026-114383

A stack-based buffer overflow exists in the TOTOLINK EX200 (version 5.2.3c.7200) within the wireless.so component. The vulnerability is located in the setWiFiAclAddConfig function of the /cgi-bin/cstecgi.cgi file, where manipulating the macAddress argument can trigger the overflow. This flaw allo...

CVE-2026-114383 TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow

A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This manipulation of the argument macAddress causes stack-based buffer overflow. The attack can be initiated remotely. The...

CVE-2026-114382 TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow

A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based buffer overflow. It is possible to launch the attack remotely...

CVE-2026-114382

The TOTOLINK EX200 running firmware version 5.2.3c.7200 is vulnerable to a stack-based buffer overflow in the lan.so component. The flaw exists within the setStaticDhcpConfig function of the /cgi-bin/cstecgi.cgi file, specifically when the Comment argument is manipulated. This vulnerability allow...

CVE-2026-114382 TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow

A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based buffer overflow. It is possible to launch the attack remotely...

PT-2026-120836

Name of the Vulnerable Software and Affected Versions TOTOLINK EX200 version 5.2.3c.7200 Description A stack-based buffer overflow exists in the setStaticDhcpConfig function within the /cgi-bin/cstecgi.cgi endpoint of the lan.so component. This issue allows a remote attacker to trigger the flaw b...

TOTOLINK EX200 buffer error vulnerability

The TOTOLINK EX200 version 5.2.3c.7200 contains a buffer error vulnerability. This vulnerability arises from the stack buffer overflow caused by the setWiFiAclAddConfig function in the file /cgi-bin/cstecgi.cgi when processing the macAddress parameter. Attackers can exploit this vulnerability...

PT-2026-120837

Name of the Vulnerable Software and Affected Versions TOTOLINK EX200 version 5.2.3c.7200 Description A stack-based buffer overflow exists in the wireless component wireless.so when processing the macAddress argument. This issue occurs within the setWiFiAclAddConfig function located at the...

TOTOLINK EX200 buffer error vulnerability

The TOTOLINK EX200 version 5.2.3c.7200 contains a buffer error vulnerability. This vulnerability arises from the setStaticDhcpConfig function in the lan.so component, which handles the Comment parameter in the file /cgi-bin/cstecgi.cgi, resulting in a stack buffer overflow. This may enable remote...

CVE-2026-15271

A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185RT10 and EX200 up to 20260906. Affected by this issue is some unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. The manipulation leads to least privilege...

CVE-2026-15271 TOTOLINK EX200 Web boa.conf least privilege violation

A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185RT10 and EX200 up to 20260906. Affected by this issue is some unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. The manipulation leads to least privilege...

CVE-2026-15271: Least Privilege Violation

A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185RT10 and EX200 up to 20260906. Affected by this issue is some unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. The manipulation leads to least privilege...

CVE-2026-11620

A security flaw has been discovered in TOTOLINK EX200 4.0.3c.7646. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation results in least privilege violation. It is possible to launch the attack remotely. The exploit has been released to the publi...

CVE-2026-11620

A security flaw has been discovered in TOTOLINK EX200 4.0.3c.7646. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation results in least privilege violation. It is possible to launch the attack remotely. The exploit has been released to the publi...

CVE-2026-11620 TOTOLINK EX200 vsftpd vsftpd.conf least privilege violation

A security flaw has been discovered in TOTOLINK EX200 4.0.3c.7646. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation results in least privilege violation. It is possible to launch the attack remotely. The exploit has been released to the publi...

CVE-2026-11620 TOTOLINK EX200 vsftpd vsftpd.conf least privilege violation

A security flaw has been discovered in TOTOLINK EX200 4.0.3c.7646. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation results in least privilege violation. It is possible to launch the attack remotely. The exploit has been released to the publi...