Vulnerability · Published Jun 9, 2026 · Assigned by VulDB
CVE-2026-11620TOTOLINK EX200 vsftpd vsftpd.conf least privilege violation
Medium 5.3
In plain English
A medium-severity security flaw in EX200 from TOTOLINK. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.3%top 78.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A security flaw has been discovered in TOTOLINK EX200 4.0.3c.7646. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation results in least privilege violation. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Affected products (as reported)
Weakness: CWE-272, CWE-266 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R
References
- VDB-369301 | TOTOLINK EX200 vsftpd vsftpd.conf least privilege violation vdb-entry
- VDB-369301 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-11620 | CVE Analysis and Report third-party-advisory
- Submit #834825 | TOTOLink EX200 V4.0.3c.7646 Misconfiguration third-party-advisory
- https://www.notion.so/TOTOLink-EX200-V4-0-3c-7646_B20201211-3671f5ba989080ccaa41d9f76fb1906b?source=copy_link exploit
- https://www.totolink.net/ product