← Database

CVE-2026-6157

HIGH CVSS: 8.8 Published: 2026-04-13 Modified: 2026-06-17

Description

A vulnerability was detected in Totolink A800R 4.1.2cu.5137_B20200730. This impacts the function setAppEasyWizardConfig in the library /lib/cste_modules/app.so. The manipulation of the argument apcliSsid results in buffer overflow. The attack can be executed remotely. The exploit is now public and may be used.

Affected Platforms

Unknown

Weakness Type

CWE-119, CWE-120

References