Critical severity · published Jun 23, 2026
CVE-2026-44089
Buffer Overflow in Totolink EX1200L router
9.4
CVSS
0.3%
EPSS
No
On KEV
Description
Totolink EX1200L router is vulnerable to Buffer Overflow in the login functionality in cgi-bin/cstecgi.cgi endpoint. This vulnerability could be exploited to cause the program to crash and to execute code remotely. This allows the attacker to perform actions as root including reading and editing data, as well as bricking the router. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 9.3.5u.6146_B20201023 but may also affect other versions.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EX
EX1200L · Totolink
9.3.5u.6146_B20201023 · source: vendor
Affected product
EX
EX1200L
Totolink
More from EX1200L
6.5
CVE-2026-75013
TOTOLINK EX1200L cstecgi.cgi setWizardCfg null pointer dereference
6.5
CVE-2026-75012
TOTOLINK EX1200L Password Configuration cstecgi.cgi setPasswordCfg null pointer dereference