CVE-2026-19812

Name of the Vulnerable Software and Affected Versions TOTOLINK A800R version 4.1.2cu.5137 B20200730

Description A remote stack-based buffer overflow exists in the UploadCustomModule() function within the /cgi-bin/cstecgi.cgi file of the product.so component. This issue occurs when the File argument is manipulated, allowing an attacker to trigger the overflow remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the /cgi-bin/cstecgi.cgi endpoint to minimize the risk of exploitation.