CVE-2026-114382
Critical · 10.0CVSS
10.0
EPSS
0.7%
Published
Oct 21, 2026
CISA due date
—
The record
A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-76030 Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-76026 Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-76027 Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a… CWE-119
- CVE-2026-76029 Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-76024 Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-119264 Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-119265 Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote… CWE-119
- CVE-2026-119263 Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a… CWE-119