PT-2026-47632 · Totolink · Ex200

·

CVE-2026-11620

·

Published

2026-06-09

·

Updated

2026-06-09

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions TOTOLINK EX200 version 4.0.3c.7646
Description A security flaw in the vsftpd component, specifically within the /etc/vsftpd.conf file, allows for a remote least privilege violation. This occurs when an attacker manipulates an unknown function to gain unauthorized privileges.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Privilege Assignment

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-11620

Affected Products

Ex200