Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
It is possible to see elevated activities targeting TOTOLINK A800R (CVE-2026-19846) https://vuldb.com/vuln/389982/cti
Post summary
The text indicates possible real‑world exploitation activity targeting TOTOLINK A800R devices affected by CVE-2026-19846, though it lacks evidence of public PoC, detailed exploit code, or patch information.
CVE-2026-19846 Stack-Based Buffer Overflow in TOTOLINK A800R Firewall Component https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-19846
Post summary
This post announces a stack-based buffer overflow vulnerability in the TOTOLINK A800R firewall component, without providing proof of concept, exploit code, or evidence of active exploitation.