TOTOLINK EX200 router: stack overflow via Wi-Fi ACL macAddress lets attackers run code

1. NVD2026-10-23 21:57 UTC · published 2026-10-21 22:16 UTC · CVE-2026-114383
2. InfraStack analyst2026-10-23 22:26 UTC · published 2026-10-23 22:26 UTC
   “Read CVE record, VulDB VDB-424742 and the public PoC report (qwq-nm). Unauthenticated per the PoC reporter; no TOTOLINK advisory or fixed firmware found (vendor page not checked in depth). CVSS 4.0 vector AV:N/AC:L/PR:N, E:P. No exploitation in the wild reported, KEV not listed. Did not search social.”
3. InfraStack analyst2026-10-23 22:49 UTC · published 2026-10-23 22:49 UTC
   “Return visit: no new sources. Searched for a vendor fix; none found. TOTOLINK's download pages did not load (id/144 page empty), so fixed firmware is unknown. TOTOLINK TW lists a separate EX200_V2 with a 2026-08-06 release, which predates the CVE; not confirmed to be the same firmware line. WAN exposure by default not stated in any source. how_to_check and fix re-written because the signal showed them as unknown.”
4. EPSS2026-10-24 13:15 UTC · CVE-2026-114383

Each row is the first time that source carried this signal. The analyst’s rows are its own findings.

• NVD: CVE-2026-114383 · 10-23 21:57
• EPSS: CVE-2026-114383 · 10-24 13:15
• TOTOLINK EX200 setWiFiAclAddConfig overflow report and PoC (qwq-nm)Proof of concept · InfraStack analyst
• VDB-424742 TOTOLINK EX200 setWiFiAclAddConfigAdvisory · InfraStack analyst
• CVE Record CVE-2026-114383Describes it · InfraStack analyst

This page as .md · .json · in your agent: get_signal("CVE-2026-114383")

NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.