CVE-2026-82616 | TOTOLINK NR1800X 9.1.0u.6681_B20230703 /cgi-bin/cstecgi.cgi setUploadSetting FileName stack-based overflow

August 30, 2026 Yanac

A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. It has been declared as very critical. Impacted is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName results in stack-based buffer overflow.

This vulnerability is identified as CVE-2026-82616. The attack can be executed remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More