VULNERABILITY INTELLIGENCE

CVE-2026-115840

CVSS score7.2 HIGH

EPSS probability0.74%

CISA KEVNot currently listed

Published2026-10-31

Last modified2026-11-01

Description

A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.