CVE-2026-7719 - Vulnerability Analysis

Overview

Totolink WA300 5.2cu.7112_B20190227 contains a buffer overflow caused by manipulation of the "http_host" argument in the POST Request Handler function loginauth in /cgi-bin/cstecgi.cgi, letting remote attackers cause memory corruption, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can cause memory corruption, potentially leading to remote code execution or system crash.

Mitigation

Update to the latest available version.

References

• https://vuldb.com/vuln/360895/cti
• https://www.totolink.net/
• https://lavender-bicycle-a5a.notion.site/TOTOLINK-WA300-loginAuth-34553a41781f8050b8ffc9e90a103cd5
• https://vuldb.com/submit/807197
• https://vuldb.com/vuln/360895

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner