CVE-2026-85031

CRITICAL 9.9CVE-2026-85031 · Published 03/09/2026 · updated 03/09/2026

In short

CVE-2026-85031 is a CRITICAL (CVSS 9.9) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.79%, higher than 56.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument topicurl results in buffer overflow. Remote exploitation of the attack is possible.

References

vuldb.com/cve/CVE-2026-85031
vuldb.com/submit/853096
vuldb.com/vuln/398296
vuldb.com/vuln/398296/cti
totolink.net

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free