CVE-2026-85031: TOTOLINK CP450 cstecgi.cgi buffer overflow
Published Sep 3, 2026
·Updated
A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument topicurl results in buffer overflow. Remote exploitation of the attack is possible.
Affected Software
1 affected component
TOTOLINK CP450=4.1.0
Event History
Sep 3, 2026
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The vulnerability is remotely exploitable over the network and requires low privileges. No user interaction is required according to the supplied severity vector.
2
Which input is involved in the overflow?
The overflow is triggered by manipulating the topicurl argument handled by /cgi-bin/cstecgi.cgi.
3
Which product version is identified as affected?
The provided data identifies TOTOLINK CP450 version 4.1.0 as affected. It does not establish whether other versions are affected.