TOTOLINK CA300-PoE: Buffer overflow in setIpQosRules (CVE-2026-123957)
A buffer overflow vulnerability has been identified in the setIpQosRules function of TOTOLINK CA300-PoE firmware 6.2c.884, which can be initiated remotely.
CVE search metadata
CVE search record: CVE-2026-123957. Severity: critical. CVSS: 9.9. KEV: no. Product: CA300-PoE (6.2c.884). Brief: TOTOLINK CA300-PoE: Buffer overflow in setIpQosRules (CVE-2026-123957). Brief link: https://feed.craftedsignal.io/briefs/2026-11-totolink-cve-2026-123957/
Triage facts
Revision 2- Applicability
- CA300-PoE (6.2c.884)
- Evidence
- Unknown
- Severity
- Critical
- Sources
- 2 public sources
- Freshness
- Revision 2Nov 7, 12:49 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Revision history 1 entry · Revision 2
- Revision 2
poc_available
Changed: claim_state, has_poc, lastmod, poc_references, references, updates
Sources: 1
A vulnerability exists in the setIpQosRules function within the /cgi-bin/cstecgi.cgi file of TOTOLINK CA300-PoE firmware version 6.2c.884. Manipulation of the ipStart argument causes a buffer overflow. The attack can be initiated remotely, and the exploit has been publicly disclosed.