CVE-2026-121597 | TOTOLINK A950RG 4.1.2cu.5268_B20221104 Easy Setup Wizard /cgi-bin/cstecgi.cgi setAppEasyWizardConfig functionType stack-based overflow

November 3, 2026 Yanac

A vulnerability categorized as very critical has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler. Executing a manipulation of the argument functionType can lead to stack-based buffer overflow.

This vulnerability appears as CVE-2026-121597. The attack may be performed from remote. In addition, an exploit is available.VulDB Recent EntriesRead More