CVE-2026-82616

CRITICAL 9.9CVE-2026-82616 · Published 31/08/2026 · updated 01/09/2026

In short

CVE-2026-82616 is a CRITICAL (CVSS 9.9) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.85%, higher than 58.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. Impacted is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.

References

lxiansheng488-bit/-
vuldb.com/cve/CVE-2026-82616
vuldb.com/submit/892941
vuldb.com/vuln/397117
vuldb.com/vuln/397117/cti
totolink.net

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free