CVE-2026-82555: TOTOLINK N600R Authentication cstecgi.cgi loginAuth random values

Published Aug 30, 2026

Updated

A vulnerability has been found in TOTOLINK N600R 4.3.0cu.7866B20220506. This vulnerability affects the function loginAuth of the file /webcste/cgi-bin/cstecgi.cgi of the component Authentication Handler. Such manipulation leads to insufficiently random values. It is possible to launch the attack remotely. This attack is characterized by high complexity. It is stated that the exploitability is difficult. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

TOTOLINK N600R=4.3.0cu.7866_B20220506

Event History

Aug 30, 2026

CVE Published

via MITRE·05:30 PM

Data Sourced

via MITRE·05:30 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployment is confirmed to be affected?

The affected product version identified is TOTOLINK N600R 4.3.0cu.7866_B20220506.

Does exploitation require local access, credentials, or user interaction?

The attack can be launched remotely and the vector indicates no privileges or user interaction are required. However, exploitation is characterized as high complexity and difficult.

Is exploit code publicly available?

Yes. The exploit has been publicly disclosed and may be used.