Skip to content

CVE record · 1 source

CVE-2026-123958

CVSS 9.9

A vulnerability was identified in TOTOLINK CA300-PoE 6.2c.884.

Vendor: TOTOLINK
Product: CA300-PoE
CVSS v3.1: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness: CWE-119, CWE-120

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

45

CVE NVD 1h ago

A vulnerability was identified in TOTOLINK CA300-PoE 6.2c.884.

A vulnerability was identified in TOTOLINK CA300-PoE 6.2c.884. The affected element is the function setLanConfig of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument lanDns/lanSecDns/langType leads to buffer…

PoC public CVSS 9.9 CVE-2026-123958 TOTOLINK