Vulnerability details

CVE-2026-123958

Totolink CA300-PoE

TOTOLINK CA300-PoE cstecgi.cgi setLanConfig buffer overflow

CVSS 4.0

9.4Critical

Official description

A vulnerability was identified in TOTOLINK CA300-PoE 6.2c.884. The affected element is the function setLanConfig of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument lanDns/lanSecDns/langType leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

CVSS scores

Score	Version	Source	Vector
9.4Critical	4.0	CVEProject cvelistV5 (CNA) (VulDB)	`CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P`
9.9Critical	3.1	CVEProject cvelistV5 (CNA) (VulDB)	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C`
9.9Critical	3.0	CVEProject cvelistV5 (CNA) (VulDB)	`CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C`
9.0High	2.0	CVEProject cvelistV5 (CNA) (VulDB)	`AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:C`

Affected products

Vendor	Product	Versions	Source
Totolink	CA300-PoE	6.2c.884	CVEProject cvelistV5 (CNA)

References and advisories

https://vuldb.com/vuln/432021 vdb-entrytechnical-description
https://vuldb.com/vuln/432021/cti signaturepermissions-required
https://vuldb.com/cve/CVE-2026-123958 third-party-advisory
https://vuldb.com/submit/1033673 third-party-advisory
https://lavender-bicycle-a5a.notion.site/TOTOLINK-CA300-PoE-setLanConfig-3f953a41781f8029941cd21d2cc16db0?source=copy_link exploit
https://www.totolink.net/ product

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-11-07
Last updated: 2026-11-07
State: Published
Assigner (CNA): VulDB
Kolun priority: 34 · Low

Exploit prediction (EPSS)

0.46%

Probability of exploitation in 30 days

40.6%

Percentile (among all CVEs)

Weaknesses (CWE)

CWE-120
Buffer Overflow
CWE-119
Memory Corruption