← Database

CVE-2026-123957

CRITICAL CVSS: 9.9 Published: 2026-11-07 Modified: 2026-11-07

Description

A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. Impacted is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ipStart causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Affected Platforms

Unknown

Weakness Type

CWE-119, CWE-120

References