TOTOLINK CA300-PoE

• CVE-2026-124058 Critical 9.1 TOTOLINK CA300-PoE cstecgi.cgi setWiFiRepeaterConfig buffer overflow –
• CVE-2026-124057 Critical 9.1 TOTOLINK CA300-PoE cstecgi.cgi setWiFiMultipleConfig buffer overflow –
• CVE-2026-123961 Critical 9.9 TOTOLINK CA300-PoE cstecgi.cgi setWiFiBasicConfig buffer overflow –
• CVE-2026-123960 Critical 9.9 TOTOLINK CA300-PoE cstecgi.cgi setWanConfig buffer overflow –
• CVE-2026-123959 Critical 9.1 TOTOLINK CA300-PoE cstecgi.cgi setLanguageCfg buffer overflow –
• CVE-2026-123958 Critical 9.9 TOTOLINK CA300-PoE cstecgi.cgi setLanConfig buffer overflow –
• CVE-2026-123957 Critical 9.9 TOTOLINK CA300-PoE cstecgi.cgi setIpQosRules buffer overflow –
• CVE-2025-6621 Medium 6.3 TOTOLINK CA300-PoE ap.so QuickSetting os command injection 2.5%
• CVE-2025-6620 Medium 6.3 TOTOLINK CA300-PoE upgrade.so setUpgradeUboot os command injection 2.5%
• CVE-2025-6619 Medium 6.3 TOTOLINK CA300-PoE upgrade.so setUpgradeFW os command injection 2.5%
• CVE-2025-6618 Medium 6.3 TOTOLINK CA300-PoE wps.so SetWLanApcliSettings os command injection 2.5%
• CVE-2024-7217 Medium 6.3 TOTOLINK CA300-PoE cstecgi.cgi loginauth buffer overflow 7.1%