CVE-2026-114383

LOWCVSS 9.3 · CRITICAL

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This manipulation of the argument macAddress causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post
  • SecAlerts@SecAlertsCo

    📡 TOTOLINK EX200 CVE-2026-114383: stack overflow in setWiFiAclAddConfig via /cgi-bin/cstecgi.cgi. CVSS 10, no auth needed, PoC exists. Network-exposed routers are sitting targets. #cybersecurity #vulnerabilities #ciso https://secalerts.co/vulnerability/CVE-2026-114383?utm_campaign=x

    0001031
    895 followersView on X

Explore more