Live › vulnerability › CVE-2026-114382
Go to dashboardThe TOTOLINK EX200 Wi-Fi extender firmware version 5.2.3c.7200 has a stack-based buffer overflow in the setStaticDhcpConfig function of its web CGI handler, triggered by the Comment argument. A remote attacker can send a crafted request to overwrite memory on the device, and a public exploit has been released.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| TOTOLINK EX200 firmware | vendor | 5.2.3c.7200 | – |
If no fix exists, restrict or disable remote access to the device's web interface.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
This page as .md · .json · in your agent: get_signal("CVE-2026-114382")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.