CVE-2026-75013Disclosure

LOWCVSS 5.7 · MEDIUM

Exploit discussion active in current signal (3 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation results in null pointer dereference. The attack can be launched remotely. The exploit is now public and may be used.

1.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-404CWE-476

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Threat summary

  • Public PoC is present in monitored signal
  • 3 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-08-17: 3PoC Mentioned / Linked · 2026-08-17: 1Technical Details · 2026-08-17: 108-17
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • MalwareObserver@MalwareObserver
    Disclosure

    🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-75013](https://gist.github.com/wyxstarry/21e6c2853891a3beb140a7c879069f9f) A vulnerabil... https://gist.github.com/wyxstarry/21e6c2853891a3beb140a7c879069f9f #PatchManagement #Vulnerability #CVE

    Post summary

    The post announces CVE‑2026‑75013 and supplies a link to a Gist for further details, but does not offer exploit code, patches, or in‑the‑wild activity information.

    0000024
    27 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-75013 A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation resu… https://www.cve.org/CVERecord?id=CVE-2026-75013 ----- Traducción: Se detectó una vul… https://infoflow.cloud`

    Post summary

    CVE-2026-75013 has been disclosed for TOTOLINK EX1200L, impacting the setWizardCfg function in /cgi-bin/cstecgi.cgi; no PoC, exploit, or patch details are provided.

    0000022
    100 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-75013 A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation resu… https://www.cve.org/CVERecord?id=CVE-2026-75013

    Post summary

    A vulnerability (CVE-2026-75013) was detected in TOTOLINK EX1200L firmware, impacting the setWizardCfg function in /cgi-bin/cstecgi.cgi, but no further details such as exploit availability, patch, or mitigation have been provided.

    00000955
    58.0K followersView on X

Explore more