{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/totolink-ca300-poe-6.2c.884/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-123960"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["TOTOLINK CA300-PoE 6.2c.884"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eA weakness has been identified in TOTOLINK CA300-PoE 6.2c.884 within the setWanConfig function of /cgi-bin/cstecgi.cgi. Manipulation of the pppoeUser, priDns, or secDns arguments can lead to a buffer overflow. This attack can be launched remotely, and public exploit code is available.\u003c/p\u003e\n","date_modified":"2026-11-07T16:54:46Z","date_published":"2026-11-07T16:54:46Z","id":"https://feed.craftedsignal.io/briefs/2026-11-totolink-buffer-overflow-51db86fb/","summary":"A buffer overflow vulnerability exists in the setWanConfig function of the TOTOLINK CA300-PoE 6.2c.884 firmware, which can be triggered remotely.","title":"TOTOLINK CA300-PoE: Buffer overflow vulnerability in setWanConfig (CVE-2026-123960)","url":"https://feed.craftedsignal.io/briefs/2026-11-totolink-buffer-overflow-51db86fb/"}],"language":"en","title":"CraftedSignal Threat Feed - TOTOLINK CA300-PoE 6.2c.884","version":"https://jsonfeed.org/version/1.1"}