CVE-2026-124059

CRITICAL 9.1CVE-2026-124059 · Published 07/11/2026 · updated 07/11/2026

In short

CVE-2026-124059 is a CRITICAL (CVSS 9.1) vulnerability.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ApCliKeyStr leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

References

lavender-bicycle-a5a.notion.site/TOTOLINK-CA300-PoE-setWiFiWdsAddConfig-3f953a41781f80488243d24703fa0365
vuldb.com/cve/CVE-2026-124059
vuldb.com/submit/1033756
vuldb.com/vuln/432114
vuldb.com/vuln/432114/cti
totolink.net

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free