CVE-2026-123958 | TOTOLINK CA300-PoE 6.2c.884 /cgi-bin/cstecgi.cgi setLanConfig lanDns/lanSecDns/langType buffer overflow

November 6, 2026 Yanac

A vulnerability categorized as very critical has been discovered in TOTOLINK CA300-PoE 6.2c.884. The affected element is the function setLanConfig of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument lanDns/lanSecDns/langType leads to buffer overflow.

This vulnerability is referenced as CVE-2026-123958. It is possible to launch the attack remotely. Furthermore, an exploit is available.VulDB Recent EntriesRead More