CVE-2026-1328
HighSummary
A vulnerability was detected in Totolink NR1800X router version 9.1.0u.6279_B20210910. It affects the setWizardCfg function in the file /cgi-bin/cstecgi.cgi of the POST Request Handler component. Manipulating the ssid argument leads to a buffer overflow. The attack can be initiated remotely, and the exploit is publicly available.
Risk Assessment
The risk for the organization includes the possibility of remote takeover or failure of the device, which could lead to network disruption or data integrity compromise.
Recommendation
It is recommended to immediately update the router firmware to the latest available version if a patch is released by the vendor, and to restrict access to the administrative interface from trusted networks.
Other vulnerabilities in Totolink NR1800X
See all- CVE-2026-82597High
A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681_B20230703 in the setUssd function of /cgi-bin/cstecgi.cgi. Manipulation of the ussd argument leads to command injection. The attack can be initiated remotely and the exploit is publicly available.
- CVE-2026-7548High
A vulnerability was detected in Totolink NR1800X version 9.1.0u.6279_B20210910, affecting the function sub_41A68C in the file /cgi-bin/cstecgi.cgi. Manipulating the argument setUssd results in command injection.
- CVE-2026-82616Critical
A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703 in the setUploadSetting function of /cgi-bin/cstecgi.cgi. Manipulation of the FileName argument leads to a stack-based buffer overflow. The attack can be executed remotely, and the exploit has been made public.
Original NVD description (English source)
A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. Impacted is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.