CVE-2026-121600Critical· 9.9▾ MidnightA flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component MAC Filter Handler. This manipulation of the argument add…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 54.5 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.5%
A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component MAC Filter Handler. This manipulation of the argument addEffect causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.
A950RG 4.1.2cu.5268_B20221104Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-121598Critical· 9.9TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow
CVE-2026-121599Critical· 9.9TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow
CVE-2026-121597Critical· 9.9TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflow
CVE-2026-116508Critical· 10.0TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow
CVE-2026-114382Critical· 10.0TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow
CVE-2026-114383Critical· 10.0TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow