EUVD-2026-119328

A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used...

EUVD-2026-119325

A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. Affected is the function setWiFiRepeaterConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument ApCliKeyStr can lead to buffer overflow. The attack can be launched remotely. The exploit has been made availabl...

EUVD-2026-119326

A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ApCliKeyStr leads to buffer overflow. The attack may be initiated remotely. The exploit...

CVE-2026-124060

A buffer overflow vulnerability exists in the TOTOLINK CA300-PoE (firmware version 6.2c.884) within the UploadCustomModule function of the /cgi-bin/cstecgi.cgi file. The vulnerability is triggered by manipulating the File argument, which can be exploited remotely. This flaw allows for a potential...

CVE-2026-124059

The TOTOLINK CA300-PoE (version 6.2c.884) is susceptible to a buffer overflow vulnerability within the setWiFiWdsAddConfig function of the /cgi-bin/cstecgi.cgi file. The flaw is triggered by manipulating the ApCliKeyStr argument. This vulnerability can be exploited remotely , potentially leading ...

CVE-2026-124058

A buffer overflow vulnerability exists in TOTOLINK CA300-PoE running firmware version 6.2c.884 . The flaw is located in the setWiFiRepeaterConfig function within the /cgi-bin/cstecgi.cgi file. By manipulating the ApCliKeyStr argument, a remote attacker can trigger a buffer overflow. This vulnerab...

CVE-2026-124057

A security flaw exists in TOTOLINK CA300-PoE firmware version 6.2c.884 . The vulnerability is located in the setWiFiMultipleConfig function within the /cgi-bin/cstecgi.cgi file. By manipulating the Key1Str1 argument, a remote attacker can trigger a buffer overflow . Public exploits for this vulne...

EUVD-2026-119324

A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument Key1Str1 results in buffer overflow. The attack can be initiated remotely. The exploit has been released ...

CVE-2026-123961

A security vulnerability exists in TOTOLINK CA300-PoE running firmware version 6.2c.884 . The flaw is located in the setWiFiBasicConfig function within the /cgi-bin/cstecgi.cgi file. Specifically, the improper handling of the KeyStr argument allows for a buffer overflow attack. This vulnerability...

EUVD-2026-119099

A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument KeyStr leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly...

CVE-2026-123960

A buffer overflow vulnerability exists in the TOTOLINK CA300-PoE (version 6.2c.884) device. The flaw is located in the setWanConfig function of the /cgi-bin/cstecgi.cgi file. An attacker can trigger the overflow remotely by manipulating the pppoeUser/priDns/secDns arguments. Public exploits for t...

EUVD-2026-119110

A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument pppoeUser/priDns/secDns can lead to buffer overflow. The attack can be launched remotely. The exploit has been made...

EUVD-2026-119111

A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. The impacted element is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument langType results in buffer overflow. The attack can be initiated remotely. The exploit has been...

CVE-2026-123959

A security flaw exists in TOTOLINK CA300-PoE running firmware version 6.2c.884 . The vulnerability is located in the setLanguageCfg function within the /cgi-bin/cstecgi.cgi file. By manipulating the langType argument, a remote attacker can trigger a buffer overflow . This flaw allows for remote a...

CVE-2026-123958

The TOTOLINK CA300-PoE (version 6.2c.884 ) is vulnerable to a buffer overflow due to improper input validation in the setLanConfig function of the /cgi-bin/cstecgi.cgi file. Specifically, manipulating the lanDns , lanSecDns , or langType arguments can trigger this flaw. This vulnerability can be ...

EUVD-2026-119011

A vulnerability was identified in TOTOLINK CA300-PoE 6.2c.884. The affected element is the function setLanConfig of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument lanDns/lanSecDns/langType leads to buffer overflow. It is possible to launch the attack remotely. The exploit is...

EUVD-2026-118996

A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. Impacted is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ipStart causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may...

CVE-2026-123957

A buffer overflow vulnerability exists in the TOTOLINK CA300-PoE firmware version 6.2c.884 . The flaw is located within the setIpQosRules function of the /cgi-bin/cstecgi.cgi file. Specifically, manipulating the ipStart argument causes the buffer overflow. This vulnerability can be exploited remo...

TOTOLink - Unauthenticated Command Injection

TOTOLink A950RG V5.9c.4050B20190424 and V4.1.2cu.5204B20210112 were discovered to contain a command injection vulnerability in the Main function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter. id: CVE-2022-25082 info: name: TOTOLink -...

TOTOLINK EX1200T 4.1.2cu.5215 - Authentication Bypass

TOTOLINK EX1200T 4.1.2cu.5215 is susceptible to authentication bypass. An attacker can bypass login by sending a specific request through formLoginAuth.htm, thus potentially being able to obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-42887 info:...