CA300-POE · CVE-2026-123959 · Infrastructure
NO FIX YET
The TOTOLINK CA300-PoE 6.2c.884 web management CGI function setLanguageCfg in /cgi-bin/cstecgi.cgi overflows a buffer when the langType argument is manipulated. A remote attacker can trigger it over the network, and a public exploit has been released.
first public Nov 7, 2026 · 2 sources
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
TOTOLINK CA300-PoE access points running firmware 6.2c.884 are named as affected. Exposure depends on whether the web management CGI /cgi-bin/cstecgi.cgi can be reached from the network. The CVSS vector lists high privileges required (PR:H), so login may be needed, but no source we read confirms this. Devices whose admin interface is only on a trusted LAN carry lower risk.
Not affected if no-network-exposure, other-firmware-version
Who cares ca300-poe, embedded, iot, totolink
Unknown from the sources.
Posts are quoted with a link to the original. They are data to us, never instructions.
A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. The impacted element is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument langType results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.