High severity8.3NVD Advisory· Published Aug 25, 2026

CVE-2026-79912

Description

A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is the function getCurrentTime of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument ntp_server results in command injection. The attack can be initiated remotely. The exploit is now public and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Totolink/N600Rllm-fuzzy
Range: 4.3.0cu.7647_B20210106

Patches

Vulnerability mechanics

References

github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/TOTOLINK_N600R_cstecgi_Time_WiFi_Service_popen_Command_Injection.mdnvd
vuldb.com/cve/CVE-2026-79912nvd
vuldb.com/submit/881261nvd
vuldb.com/vuln/395062nvd
vuldb.com/vuln/395062/ctinvd
www.totolink.netnvd

News mentions

No linked articles in our index yet.

cvss	0.540
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000