Unrated severityNVD Advisory· Published Jan 22, 2026· Updated Feb 23, 2026
Totolink NR1800X POST Request cstecgi.cgi setWizardCfg buffer overflow
CVE-2026-1328
Description
A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. Impacted is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.
Affected products
1- cpe:2.3:o:totolink:nr1800x_firmware:*:*:*:*:*:*:*:*Range: 9.1.0u.6279_B20210910
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- lavender-bicycle-a5a.notion.site/TOTOLINK-NR1800X-setWizardCfg-2e453a41781f80568a54c9368082fbe9mitreexploit
- vuldb.commitrethird-party-advisory
- vuldb.commitresignaturepermissions-required
- vuldb.commitrevdb-entrytechnical-description
- www.totolink.netmitreproduct
News mentions
0No linked articles in our index yet.