CVE-2026-114382

TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow

CRITICAL 9.3EPSS 0.7%

A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

Affected: TOTOLINK · EX200
CVSS v4.0 VULDB: 9.3 CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v3.1 VULDB: 10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v2.0 VULDB: 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS: 0.67% chance of exploitation in the next 30 days, 52nd percentile
Published: 2026-10-21
Updated: 2026-10-28

Proof-of-concept exploits (1)

qwq-nm/CVE/blob/f5d61361eb7d846479f6d76c0aa4273e9af46d27/CVE1/report.mdRepo stars 0★ · pushed 2026-10-11 · find archive

CVE references

https://vuldb.com/cve/CVE-2026-114382REFERENCE
https://vuldb.com/submit/1019881REFERENCE
https://vuldb.com/vuln/424741REFERENCE
https://vuldb.com/vuln/424741/ctiREFERENCE
https://www.totolink.netREFERENCE

CVE-2026-114382

Proof-of-concept exploits (1)

CVE references

References

Related