CVE-2026-7717: Totolink WA300 POST Request cstecgi.cgi UploadCustomModule buffer overflow
A vulnerability was determined in Totolink WA300 5.2cu.7112B20190227. This issue affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Executing a manipulation of the argument File can lead to buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7717?
CVE-2026-7717 has a high severity rating due to the potential for buffer overflow exploitation.
How do I fix CVE-2026-7717?
To remediate CVE-2026-7717, update the Totolink WA300 to the latest firmware version provided by the manufacturer.
What type of vulnerability is CVE-2026-7717?
CVE-2026-7717 is classified as a buffer overflow vulnerability located in the UploadCustomModule function.
Which product is affected by CVE-2026-7717?
CVE-2026-7717 specifically affects the Totolink WA300 with firmware version 5.2cu.7112_B20190227.
Can CVE-2026-7717 be exploited remotely?
Yes, CVE-2026-7717 can be exploited remotely through a crafted POST request to the affected device.