Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was detected in Totolink A800R 4.1.2cu.5137_B20200730. This impacts the function setAppEasyWizardConfig in the library /lib/cste_modules/app.so. The manipulation of the argument apcliSsid results in buffer overflow. The attack can be executed remotely. The exploit is now public and may be used.
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-12 | 1 | Disclosure1 |
| 2026-04-13 | 1 | PoC1 |
| 2026-04-29 | 1 | Exploit1 |
🚨 HIGH: CVE-2026-6157 (CVSS 8.8) - Buffer overflow in Totolink A800R router. Remotely exploitable via setAppEasyWizardConfig function. Exploit is PUBLIC. Patch immediately! #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/SzMDByXdI5
Post summary
The tweet announces CVE-2026-6157, a buffer overflow in Totolink routers that is publicly exploitable, with an immediate patch urged.
[CVE-2026-6157: HIGH] Vulnerability in Totolink A800R 4.1.2cu.5137_B20200730 discovered. Attack via buffer overflow manipulation of apcliSsid in setAppEasyWizardConfig function. Exploit now public.#cve,CVE-2026-6157,#cybersecurity https://cvefind.com/CVE-2026-6157
Post summary
The text alerts to a high‑severity buffer overflow (CVE‑2026‑6157) in Totolink A800R and notes that a public exploit (PoC) now exists, but no active exploitation or patch information is provided.
A new vulnerability with increased severity was disclosed for Totolink A800R (CVE-2026-6157) https://vuldb.com/vuln/357037
Post summary
The post announces a newly disclosed vulnerability (CVE-2026-6157) affecting the Totolink A800R with increased severity, but provides no technical or remediation details.