Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component wps.so. The manipulation of the argument pin results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
Attention, elevated activities detected targeting TOTOLINK A800R (CVE-2026-19847) https://vuldb.com/vuln/389983/cti
Post summary
The tweet indicates that CVE-2026-19847 is being actively exploited against TOTOLINK A800R, providing only a link for reference without PoC or patch information.
CVE-2026-19847 Stack-Based Buffer Overflow in TOTOLINK A800R via WPS Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-19847
Post summary
A Stack-Based Buffer Overflow vulnerability (CVE-2026-19847) affecting TOTOLINK A800R routers through the WPS function has been reported, but no proof‑of‑concept, exploit code, patch, or evidence of active exploitation is provided.