CVE-2026-19815Active Exploitation

MEDIUMCVSS 7.4 · HIGH

Exploitation ongoing with high activity in latest observed window (2 mentions)

Immediate actions

Patch affected systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

A flaw has been found in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected by this vulnerability is the function setParentalRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Executing a manipulation of the argument urlKeyword can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.

Back to dashboard

4.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-119CWE-121

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Active exploitation appears in 1 classified signals
Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Active exploitation reported across 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Active Exploitation

150.0%

Patch

150.0%

Referenced assets1 URL

By indicator

https://vuldb.com/vuln/389951/cti

Full discourse2 posts

𝔸𝕟𝕠𝕟𝕪𝕞𝕠𝕦𝕤 ℍ𝕒𝕔𝕜𝕥𝕚𝕧𝕚𝕤𝕥☭⃠🅇@YourAnon_irc46d
Patch
Recent CVEs (CVE-2026-19815, -19814, -19813) in TOTOLINK A800R devices expose severe stack-based buffer overflows, risking data privacy & integrity in transit. Public exploits exist. Patch immediately! #Cybersecurity #Vulnerabilities #NetworkSecurity
Post summary
The post highlights three recent CVEs affecting TOTOLINK A800R devices, describing them as severe stack-based buffer overflows, noting that public exploits exist, and urges immediate patching.
0000033
17 followersView on X
VulDB 🛡@vuldb46d
Active Exploitation
A lot of offensive activities were identified targeting TOTOLINK A800R (CVE-2026-19815) https://vuldb.com/vuln/389951/cti
Post summary
Offensive activities identified indicate that CVE‑2026‑19815 is being actively exploited on TOTOLINK A800R routers.
00000120
2.3K followersView on X

Explore more

Back to dashboard