CVE-2026-121597Critical· 9.9▾ MidnightA weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler. Executing a manipulation of the argum…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 54.5 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.6%
A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler. Executing a manipulation of the argument functionType can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
A950RG 4.1.2cu.5268_B20221104Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-121598Critical· 9.9TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow
CVE-2026-121600Critical· 9.9TOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflow
CVE-2026-121599Critical· 9.9TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow
CVE-2026-116508Critical· 10.0TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow
CVE-2026-114382Critical· 10.0TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow
CVE-2026-114383Critical· 10.0TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow