high
advisory
TOTOLINK CA300-PoE: Remote buffer overflow in setWiFiMultipleConfig (CVE-2026-124057)
A remote buffer overflow vulnerability has been identified in the TOTOLINK CA300-PoE function setWiFiMultipleConfig.
CVE search metadata
CVE search record: CVE-2026-124057. Severity: critical. CVSS: 9.1. KEV: no. Product: CA300-PoE. Brief: TOTOLINK CA300-PoE: Remote buffer overflow in setWiFiMultipleConfig (CVE-2026-124057). Brief link: https://feed.craftedsignal.io/briefs/2026-11-totolink-buffer-overflow-664a7234/
Triage facts
Revision 1- Applicability
- CA300-PoE
- Evidence
- Unknown
- Severity
- High
- Sources
- 3 public sources
- Freshness
- Revision 1Nov 7, 22:10 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- C3Roughly even chance
CVE-2026-124057 is a remote buffer overflow vulnerability in the TOTOLINK CA300-PoE. The flaw exists in the setWiFiMultipleConfig function within /cgi-bin/cstecgi.cgi. Manipulation of the Key1Str1 argument triggers the overflow. A public exploit for this vulnerability is available.