CVE-2026-121599: TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow
A vulnerability was detected in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected is the function setWiFiMultipleConfig/delWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi of the component Multi-SSID Configuration. The manipulation of the argument wepkey2/wepkey3 results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack can be launched remotely, but the CVSS vector indicates that low-level privileges are required. No user interaction is required.
Which inputs and endpoints should defenders prioritize for monitoring or filtering?
The affected functionality is setWiFiMultipleConfig and delWiFiMultipleConfig in /cgi-bin/cstecgi.cgi. The vulnerable arguments are wepkey2 and wepkey3; malformed or unusually large values supplied to these parameters should be treated as suspicious.
How urgent is remediation?
Remediation should be prioritized because successful exploitation can affect confidentiality, integrity, and availability, and the scope is changed. A public exploit is available, increasing the likelihood of attempted exploitation.