CVE-2026-75013

MediumCVSS 6.5

Published: 17/08/2026(UTC)Updated: 23/10/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.66%

51th percentile - higher than 51% of all known CVEs

Summary

A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation results in null pointer dereference. The attack can be launched remotely. The exploit is now public and may be used.

Risk Assessment

A remote attack can cause device crash or denial of service, potentially disrupting network operations.

Recommendation

Apply available vendor patches or restrict device access to trusted networks.

Other vulnerabilities in TOTOLINK EX1200L

CVE-2026-75012Medium
A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Password Configuration Handler. The manipulation leads to null pointer dereference. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS