Medium severity4.3NVD Advisory· Published Jun 8, 2026· Updated Jun 9, 2026
CVE-2026-11494
CVE-2026-11494
Description
A security vulnerability has been detected in TOTOLINK AC1200 T8 4.1.5cu.8611. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation leads to least privilege violation. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Affected products
1Patches
Vulnerability mechanics
References
6News mentions
1- Totolink Routers: Three vsftpd Least Privilege Vulnerabilities DisclosedVypr Intelligence · Jun 9, 2026