Login Request a demo
Critical severity · published Aug 30, 2026
CVE-2026-82539
TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption
9.1
CVSS
0.8%
EPSS
No
On KEV
Description
A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
A7
A720R · TOTOLINK
4.1.5cu.630_B20250509 · source: vendor
Affected product
A7
A720R
TOTOLINK
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-82539
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-82539
github.com
https://github.com/Xernary/CVE-2026-82539
vuldb.com
https://vuldb.com/cve/CVE-2026-82539
vuldb.com
https://vuldb.com/submit/888696
vuldb.com
https://vuldb.com/vuln/397055
vuldb.com
https://vuldb.com/vuln/397055/cti
www.totolink.net
https://www.totolink.net/
More from A720R
9.8
CVE-2025-9303
A security flaw has been discovered in TOTOLINK A720R 4.1.5cu.630_B20250509
9.8
CVE-2023-23064
TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control
9.8
CVE-2021-45742
TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection vulnerability in the "Main" function
9.8
CVE-2021-45740
TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the setWiFiWpsStart function
9.8
CVE-2021-44247
Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain command injection vulnerability in the…