PT-2026-47435 · Totolink · Cp450

L-14 · Published 2026-06-08 · Updated 2026-06-08 · CVE-2026-11554

NVD

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

A vulnerability was determined in TOTOLINK CP450 4.1.0cu.747. This vulnerability affects unknown code of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes least privilege violation. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Exploit

Fix

Incorrect Privilege Assignment

Weakness Enumeration

CWE-272

CWE-266

Related Identifiers

CVE-2026-11554

Affected Products

Cp450

References · 7

• 🔥 https://notion.so/TOTOLink-CP450-V4-1-0cu-747-3671f5ba989080c3b39ac3984d2ff44d?source=copy_link · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-11554 · Security Note
• https://totolink.net · Note
• https://vuldb.com/cve/CVE-2026-11554 · Note
• https://vuldb.com/submit/834821 · Note
• https://vuldb.com/vuln/369164/cti · Note
• https://vuldb.com/vuln/369164 · Note