CVE-2026-114383

TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow

CRITICAL 9.3EPSS 0.7%

A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This manipulation of the argument macAddress causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.

Affected: TOTOLINK · EX200
CVSS v4.0 VULDB: 9.3 CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v3.1 VULDB: 10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v2.0 VULDB: 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS: 0.65% chance of exploitation in the next 30 days, 51st percentile
Published: 2026-10-21
Updated: 2026-10-28

Proof-of-concept exploits (1)

qwq-nm/CVE/blob/f5d61361eb7d846479f6d76c0aa4273e9af46d27/CVE2/report.mdRepo stars 0★ · pushed 2026-10-11 · snapshot

CVE references

https://vuldb.com/cve/CVE-2026-114383REFERENCE
https://vuldb.com/submit/1019883REFERENCE
https://vuldb.com/vuln/424742REFERENCE
https://vuldb.com/vuln/424742/ctiREFERENCE
https://www.totolink.netREFERENCE

CVE-2026-114383

Proof-of-concept exploits (1)

CVE references

References

Related