CVSS 9.9 — CRITICO

CVE-2026-82616 — Vulnerabilità CRITICAL su N/A

Pubblicato il 2026-08-31 · Fonte: NVD NIST

CVE ID

CVE-2026-82616

CVSS Score

9.9

Vendor

N/A

Prodotti

N/A

Exploit pubblico

Non noto

Sfruttata (CISA)

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Riassunto tecnico

A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. Impacted is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.

Impatto

Vulnerabilità con punteggio CVSS 9.9 (CRITICAL). Sfruttata attivamente: No.

Sistemi vulnerabili

Vendor: N/A
Prodotti: N/A

Mitigazioni

Applicare le patch del vendor appena disponibili. Monitorare gli advisory ufficiali.

Fonti ufficiali

🔗 NVD NIST — CVE-2026-82616

https://github.com/lxiansheng488-bit/-/blob/main/TOTOlink/totolink%20setUploadSe
https://vuldb.com/cve/CVE-2026-82616
https://vuldb.com/submit/892941
https://vuldb.com/vuln/397117
https://vuldb.com/vuln/397117/cti

Vuoi approfondire la cybersecurity? Scopri il libro "Ethical Hacker per Tutti" oppure prenota una lezione online.