{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3atotolinkca300_poe/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:totolink:ca300_poe:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-123958"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["CA300-PoE (6.2c.884)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["TOTOLINK"],"content_html":"\u003cp\u003eA buffer overflow vulnerability (CVE-2026-123958) was identified in the setLanConfig function of the /cgi-bin/cstecgi.cgi file in TOTOLINK CA300-PoE version 6.2c.884. Manipulation of the lanDns, lanSecDns, or langType arguments leads to a buffer overflow. The attack can be launched remotely, and the exploit is publicly available.\u003c/p\u003e\n","date_modified":"2026-11-07T09:58:16Z","date_published":"2026-11-07T09:58:16Z","id":"https://feed.craftedsignal.io/briefs/2026-11-totolink-buffer-overflow-ef78ab51/","summary":"A buffer overflow vulnerability was identified in the setLanConfig function of TOTOLINK CA300-PoE 6.2c.884.","title":"TOTOLINK CA300-PoE: Buffer overflow vulnerability (CVE-2026-123958)","url":"https://feed.craftedsignal.io/briefs/2026-11-totolink-buffer-overflow-ef78ab51/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:totolink:ca300_poe:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-123957"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=CVE-2026-123957\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":["CA300-PoE (6.2c.884)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["TOTOLINK"],"content_html":"\u003cp\u003eA vulnerability exists in the setIpQosRules function within the /cgi-bin/cstecgi.cgi file of TOTOLINK CA300-PoE firmware version 6.2c.884. Manipulation of the ipStart argument causes a buffer overflow. The attack can be initiated remotely, and the exploit has been publicly disclosed.\u003c/p\u003e\n","date_modified":"2026-11-07T12:49:19Z","date_published":"2026-11-07T09:58:07Z","id":"https://feed.craftedsignal.io/briefs/2026-11-totolink-cve-2026-123957/","summary":"A buffer overflow vulnerability has been identified in the setIpQosRules function of TOTOLINK CA300-PoE firmware 6.2c.884, which can be initiated remotely.","title":"TOTOLINK CA300-PoE: Buffer overflow in setIpQosRules (CVE-2026-123957)","url":"https://feed.craftedsignal.io/briefs/2026-11-totolink-cve-2026-123957/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:totolink:ca300_poe:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}