CVE-2026-124059

Description

A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ApCliKeyStr leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

Affected products

References

External links from the record. They lead to third-party sites.

• VDB-432114 | TOTOLINK CA300-PoE cstecgi.cgi setWiFiWdsAddConfig buffer overflow technical-description, vdb-entry
  https://vuldb.com/vuln/432114
• VDB-432114 | CTI Indicators (IOB, IOC, IOA) permissions-required, signature
  https://vuldb.com/vuln/432114/cti
• CVE-2026-124059 | CVE Analysis and Report third-party-advisory
  https://vuldb.com/cve/CVE-2026-124059
• Submit #1033756 | TOTOLINK CA300-PoE CA300-PoE_Firmware V6.2c.884 Buffer Overflow third-party-advisory
  https://vuldb.com/submit/1033756
• https://lavender-bicycle-a5a.notion.site/TOTOLINK-CA300-PoE-setWiFiWdsAddConfig-3f953a41781f80488243d24703fa0365?source=… exploit
• https://www.totolink.net/ product