CVE-2026-75012 | TOTOLINK EX1200L 9.3.5u.6146_B20201023 Password Configuration /cgi-bin/cstecgi.cgi setPasswordCfg null pointer dereference

August 17, 2026 Yanac

A vulnerability classified as critical has been found in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Password Configuration Handler. The manipulation leads to null pointer dereference.

This vulnerability is documented as CVE-2026-75012. The attack can be initiated remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More