Vulnerability Description
A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/qwq-nm/CVE/blob/f5d61361eb7d846479f6d76c0aa4273e9af46d27/CVE1
- https://vuldb.com/cve/CVE-2026-114382
- https://vuldb.com/submit/1019881
- https://vuldb.com/vuln/424741
- https://vuldb.com/vuln/424741/cti
- https://www.totolink.net/
FAQ
What is CVE-2026-114382?
CVE-2026-114382 is a vulnerability with a CVSS score of 10.0 (CRITICAL). A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argum...
How severe is CVE-2026-114382?
CVE-2026-114382 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-114382?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.