CVE-2026-121598 | TOTOLINK A950RG 4.1.2cu.5268_B20221104 Basic Wireless Configuration /cgi-bin/cstecgi.cgi strcpy wepkey stack-based overflow

November 3, 2026 Yanac

A vulnerability identified as very critical has been detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow.

This vulnerability is traded as CVE-2026-121598. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More