PT-2026-36745 · Totolink · Wa300

Wxhwxhwxh_Mie · Published 2026-05-04 · Updated 2026-05-04 · CVE-2026-7717

NVD

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

A vulnerability was determined in Totolink WA300 5.2cu.7112 B20190227. This issue affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Executing a manipulation of the argument File can lead to buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2026-7717

Affected Products

Wa300

References · 6

• 🔥 https://lavender-bicycle-a5a.notion.site/TOTOLINK-WA300-UploadCustomModule-34553a41781f80a8a287e48a7fb04de9 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7717 · Security Note
• https://totolink.net · Note
• https://vuldb.com/vuln/360893 · Note
• https://vuldb.com/vuln/360893/cti · Note
• https://vuldb.com/submit/807193 · Note