CVE-2026-123960 | TOTOLINK CA300-PoE 6.2c.884 /cgi-bin/cstecgi.cgi setWanConfig pppoeUser/priDns/secDns buffer overflow

November 6, 2026 Yanac

A vulnerability labeled as very critical has been found in TOTOLINK CA300-PoE 6.2c.884. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument pppoeUser/priDns/secDns can lead to buffer overflow.

This vulnerability is tracked as CVE-2026-123960. The attack can be launched remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More