CVE-2026-121600: TOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflow
A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this vulnerability is the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component MAC Filter Handler. This manipulation of the argument addEffect causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack can be initiated remotely, but the severity vector indicates low privileges are required. No user interaction is required.
Which systems are known to be affected?
The affected product and version identified in the available data are TOTOLINK A950RG firmware 4.1.2cu.5268_B20221104. The vulnerable functionality is the MAC Filter Handler's setMacFilterRules function in /cgi-bin/cstecgi.cgi.
Is exploit code available?
Yes. The vulnerability is flagged as having a proof of concept, and the available data states that an exploit has been published and may be used.