Skip to main content

TOTOLINK A800R EUVD-2026-26450

| CVE-2026-7503 HIGH
Classic Buffer Overflow (CWE-120)
2026-04-30 VulDB
Buffer Overflow
7.4
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

7
PoC Detected
May 01, 2026 - 15:26 vuln.today
Public exploit code
Re-analysis Queued
Apr 30, 2026 - 22:22 vuln.today
cvss_changed
CVSS changed
Apr 30, 2026 - 22:22 NVD
8.8 (HIGH) 7.4 (HIGH)
Analysis Generated
Apr 30, 2026 - 22:16 vuln.today
EUVD ID Assigned
Apr 30, 2026 - 22:00 euvd
EUVD-2026-26450
Analysis Generated
Apr 30, 2026 - 22:00 vuln.today
CVE Published
Apr 30, 2026 - 21:45 nvd
HIGH 7.4

DescriptionNVD

A vulnerability was detected in code-projects for Plugin 4.1.2cu.5137. The impacted element is the function setWiFiMultipleConfig in the library /lib/cste_modules/wireless.so of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument wepkey2 results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.

AnalysisAI

Buffer overflow in TOTOLINK A800R router firmware 4.1.2cu.5137 enables authenticated remote attackers to achieve arbitrary code execution with high privileges. The vulnerability exists in the setWiFiMultipleConfig function of the wireless configuration module (wireless.so) within the cstecgi.cgi web interface, exploitable via malformed wepkey2 parameter. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Identify all TOTOLIK A800R routers in your environment and document current firmware versions via administrative access. Within 7 days: Restrict administrative access to affected routers to authorized personnel only; isolate routers from untrusted networks if possible; monitor router logs for suspicious wepkey2 parameter submissions. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Share

EUVD-2026-26450 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy