CVE-2026-75012 json
TOTOLINK EX1200L Password Configuration cstecgi.cgi setPasswordCfg null pointer dereference
published 2026-08-17 2 mo ago modified 2026-10-23 16 d ago also EUVD-2026-60360
- cvss
- 6.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.7%
- EPSS 0.7% chance of exploitation in 30 days, percentile 51%
- public exploits
- 0
- none known
Summary
A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Password Configuration Handler. The manipulation leads to null pointer dereference. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- partial
- Assessed
- 2 mo ago
Exploit prediction
0.66% chance of exploitation in the next 30 days, higher than 51% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- gist.github.com https://gist.github.com/wyxstarry/afdc067090575c216a9d2622c3338e5c referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 7.1 | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P |
| CNA | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R |
| CNA | 3.0 | 6.5 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R |
| CNA | 2.0 | 6.8 | AV:N/AC:L/Au:S/C:N/I:N/A:C/E:POC/RL:ND/RC:UR |
| CNA | 4.0 | 5.7 | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| CNA | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| CNA | 2.0 | 6.8 | AV:N/AC:L/Au:S/C:N/I:N/A:C |
Affected products
- TOTOLINK EX1200L
Classification
References
-
gist.github.com
/wyxstarry/afdc067090575c216a9d2622c3338e5c
exploit
-
vuldb.com
/vuln/391272
vdb-entry, technical-description
-
vuldb.com
/vuln/391272/cti
signature, permissions-required
-
vuldb.com
/cve/CVE-2026-75012
third-party-advisory
-
vuldb.com
/submit/876022
third-party-advisory
-
totolink.net
/
product
Sources
- CVE List CVE-2026-75012
- NVD CVE-2026-75012
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.