Critical severity10.0NVD Advisory· Published Oct 21, 2026

CVE-2026-114382

Description

A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Totolink/EX200llm-fuzzy
Range: 5.2.3c.7200

Patches

Vulnerability mechanics

References

github.com/qwq-nm/CVE/blob/f5d61361eb7d846479f6d76c0aa4273e9af46d27/CVE1/report.mdnvd
vuldb.com/cve/CVE-2026-114382nvd
vuldb.com/submit/1019881nvd
vuldb.com/vuln/424741nvd
vuldb.com/vuln/424741/ctinvd
www.totolink.netnvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000