TOTOLINK CA300-PoE 6.2c.884 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/totolink-ca300-poe-6.2c.884/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 07 Nov 2026 16:54:46 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgTOTOLINK CA300-PoE: Buffer overflow vulnerability in setWanConfig (CVE-2026-123960)https://feed.craftedsignal.io/briefs/2026-11-totolink-buffer-overflow-51db86fb/Sat, 07 Nov 2026 16:54:46 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-totolink-buffer-overflow-51db86fb/A buffer overflow vulnerability exists in the setWanConfig function of the TOTOLINK CA300-PoE 6.2c.884 firmware, which can be triggered remotely.<p>A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884 within the setWanConfig function of /cgi-bin/cstecgi.cgi. Manipulation of the pppoeUser, priDns, or secDns arguments can lead to a buffer overflow. This attack can be launched remotely, and public exploit code is available.</p> criticaladvisory