Vulnerability · Published Aug 25, 2026 · Assigned by VulDB

CVE-2026-79911TOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based overflow

Critical 10.0

In plain English

A critical-severity stack buffer overflow in N600R from TOTOLINK. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).

Severity (CVSS 3.1)10.0Critical

Exploit odds (30 days)1.1%top 34.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument Hostname leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Affected products (as reported)

Vendor	Product	Versions
TOTOLINK	N600R	4.3.0cu.7647_B20210106

Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-395061 | TOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based overflow vdb-entry, technical-description
VDB-395061 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-79911 | CVE Analysis and Report third-party-advisory
Submit #881258 | Totolink N600R Wireless N Router V4.3.0cu.7647_B20210106 Stack-based Buffer Overflow third-party-advisory
https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/TOTOLINK_N600R_cstecgi_strcpy_sprintf_Multi_Function_Stack_Overflow.md exploit
https://www.totolink.net/ product