Vulnerability · Published Nov 4, 2026 · Assigned by VulDB

CVE-2026-121599TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow

Critical 9.9

In plain English

A critical-severity stack buffer overflow in A950RG from TOTOLINK. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).

Severity (CVSS 3.1)9.9Critical

Exploit odds (30 days)0.5%top 59.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function setWiFiMultipleConfig/delWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi of the component Multi-SSID Configuration. The manipulation of the argument wepkey2/wepkey3 results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.

Affected products (as reported)

Vendor	Product	Versions
TOTOLINK	A950RG	4.1.2cu.5268_B20221104

Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-430441 | TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow vdb-entry, technical-description
VDB-430441 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-121599 | CVE Analysis and Report third-party-advisory
Submit #1022561 | TOTOLINK A950RG V4.1.2cu.5268_B20221104 Stack Buffer Overflow third-party-advisory
https://gist.github.com/H3rmesk1t/44673654282c9b21bc8971bab7e4b8a3 exploit
https://www.totolink.net/ product