CVE-2026-1156: Totolink LR350 cstecgi.cgi setWiFiBasicCfg buffer overflow
A vulnerability was determined in Totolink LR350 9.3.5u.6369B20220309. Affected by this issue is the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ssid causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1156?
CVE-2026-1156 is classified as a high-severity vulnerability due to its potential for remote code execution through buffer overflow.
How do I fix CVE-2026-1156?
To mitigate CVE-2026-1156, users should update the Totolink LR350 firmware to the latest version provided by the manufacturer.
What types of devices are affected by CVE-2026-1156?
CVE-2026-1156 affects the Totolink LR350 router, specifically version 9.3.5u.6369_B20220309.
What is the impact of CVE-2026-1156?
The impact of CVE-2026-1156 can lead to unauthorized access and control of the device, compromising the network's security.
How does CVE-2026-1156 exploit the system?
CVE-2026-1156 exploits the system through a buffer overflow in the setWiFiBasicCfg function by manipulating the ssid argument.