Vulnerabilities

A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884.

A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ApCliKeyStr leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

TOTOLINK

Product

CA300-PoE

CVSS v3.1

9.1 AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness

CWE-119, CWE-120

NVD status

Deferred

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-124059 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 33
   CVE NVD 2h ago

   A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884.

   CVSS 9.1 CVE-2026-124058 TOTOLINK
2. 45
   CVE NVD 3h ago

   A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884.

   PoC public CVSS 9.1 CVE-2026-124057 TOTOLINK