VULNERABILITY INTELLIGENCE

CVE-2026-1686

CVSS score8.8 HIGH
EPSS probability0.78%
CISA KEVNot currently listed
Published2026-01-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A security flaw has been discovered in Totolink A3600R 5.9c.4959. This issue affects the function setAppEasyWizardConfig in the library /lib/cste_modules/app.so. Performing a manipulation of the argument apcliSsid results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.

Weakness classification

  • cna@vuldb.com: CWE-119

Primary references