CVE-2026-124060: TOTOLINK CA300-PoE cstecgi.cgi UploadCustomModule buffer overflow

Published Nov 7, 2026

Updated

A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.

Event History

Nov 7, 2026

CVE Published

via MITRE·08:30 PM

Data Sourced

via MITRE·08:30 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this vulnerability?

Systems running TOTOLINK CA300-PoE version 6.2c.884 are identified as affected. Because the vulnerable CGI endpoint can be attacked remotely, exposed devices may be reachable by an attacker without local access.

What does an attacker need to exploit it?

The issue is triggered by manipulating the File argument handled by the UploadCustomModule function in /cgi-bin/cstecgi.cgi. The available information states that remote exploitation is possible and that a public exploit exists, but does not specify authentication requirements.

How urgent is remediation?

Prioritize investigation and remediation because exploitation can be launched remotely and public exploit code is available. The supplied data does not identify a fixed version or a vendor mitigation.

CVE-2026-124060: TOTOLINK CA300-PoE cstecgi.cgi UploadCustomModule buffer overflow

Event History

Frequently Asked Questions

Who is exposed to this vulnerability?

What does an attacker need to exploit it?

How urgent is remediation?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this vulnerability?

What does an attacker need to exploit it?

How urgent is remediation?