CVE-2026-114382
CriticalCVSS 10.0Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
In TOTOLINK EX200 5.2.3c.7200, the setStaticDhcpConfig function in /cgi-bin/cstecgi.cgi of the lan.so component is vulnerable to a stack-based buffer overflow via manipulation of the Comment argument. The attack can be launched remotely, and the exploit has been released to the public and may be used for attacks.
Risk Assessment
Potential remote code execution or device destabilization, which could lead to network compromise.
Recommendation
Update the device firmware to the latest version. If no patch is available, restrict access to the management interface.
Other vulnerabilities in TOTOLINK EX200
See all- CVE-2026-114383Critical
In TOTOLINK EX200 5.2.3c.7200, the setWiFiAclAddConfig function in /cgi-bin/cstecgi.cgi of the wireless.so component is vulnerable to a stack-based buffer overflow via manipulation of the macAddress argument. The attack can be initiated remotely, and the exploit has been made available to the public and could be used for attacks.
- CVE-2026-11620Medium
A least privilege violation was discovered in the vsftpd component of TOTOLINK EX200 router version 4.0.3c.7646. Manipulation of the /etc/vsftpd.conf file allows remote exploitation. A public exploit is available.
Original NVD description (English source)
A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS