TOTOLINK EX200 (5.2.3c.7200) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/totolink-ex200-5.2.3c.7200/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 22 Oct 2026 01:51:16 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgTOTOLINK EX200: Stack-based buffer overflow in setStaticDhcpConfig (CVE-2026-114382)https://feed.craftedsignal.io/briefs/2026-10-totolink-ex200-rce/Thu, 22 Oct 2026 01:51:16 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-totolink-ex200-rce/A security flaw in TOTOLINK EX200 firmware 5.2.3c.7200 allows for remote stack-based buffer overflow via the Comment argument in the setStaticDhcpConfig function.<p>A security flaw has been identified in TOTOLINK EX200 version 5.2.3c.7200. The vulnerability exists within the 'setStaticDhcpConfig' function of the '/cgi-bin/cstecgi.cgi' file in the 'lan.so' component. Manipulating the 'Comment' argument triggers a stack-based buffer overflow. The attack can be launched remotely, and a public exploit is available.</p> criticaladvisory