Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security flaw has been discovered in Totolink A3600R 5.9c.4959. This issue affects the function setAppEasyWizardConfig in the library /lib/cste_modules/app.so. Performing a manipulation of the argument apcliSsid results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-1686 Buffer Overflow in Totolink A3600R 5.9c.4959 via setAppEasyWizardConfig https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1686
Post summary
The notice identifies CVE-2026-1686 as a buffer overflow vulnerability affecting Totolink A3600R firmware 5.9c.4959, specifically triggered by the setAppEasyWizardConfig function.
[CVE-2026-1686: HIGH] Critical security flaw found in Totolink A3600R 5.9c.4959! Vulnerability allows remote attackers to trigger buffer overflow. Public exploit available for potential attacks. #cybersecurity#cve,CVE-2026-1686,#cybersecurity https://cvefind.com/CVE-2026-1686
Post summary
A high‑severity buffer overflow flaw in Totolink A3600R firmware is disclosed, noting a public exploit is available, though no patch or active exploitation evidence is offered.
CVE-2026-1686 A security flaw has been discovered in Totolink A3600R 5.9c.4959. This issue affects the function setAppEasyWizardConfig in the library /lib/cste_modules/app.so. Perfor… https://www.cve.org/CVERecord?id=CVE-2026-1686
Post summary
The CVE-2026-1686 vulnerability in Totolink A3600R 5.9c.4959 targets the setAppEasyWizardConfig function in /lib/cste_modules/app.so; no PoC, exploit, or patch details are provided.
We have just added an important vulnerability affecting Totolink A3600R (CVE-2026-1686) https://vuldb.com/?id.343480
Post summary
The post announces the identification of CVE‑2026‑1686 in the Totolink A3600R but provides no additional details such as proofs, exploits, or mitigation steps.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | totolink | a3600r | - | - | - |
| OS | totolink | a3600r_firmware | 5.9c.4959 | - | - |