Critical severity10.0NVD Advisory· Published Aug 25, 2026

CVE-2026-79911

Description

A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument Hostname leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Totolink/N600Rllm-fuzzy
Range: 4.3.0cu.7647_B20210106

Patches

Vulnerability mechanics

References

github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/TOTOLINK_N600R_cstecgi_strcpy_sprintf_Multi_Function_Stack_Overflow.mdnvd
vuldb.com/cve/CVE-2026-79911nvd
vuldb.com/submit/881258nvd
vuldb.com/vuln/395061nvd
vuldb.com/vuln/395061/ctinvd
www.totolink.netnvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000