CVE ID :CVE-2026-123960 Published : Nov. 7, 2026, 10:17 a.m. | 56 minutes ago Description :A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument pppoeUser/priDns/secDns...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-123960 - TOTOLINK CA300-PoE cstecgi.cgi setWanConfig buffer overflow

VERWANDTEARTIKEL

CVE-2026-120984 - Keycloak-services: keycloak-services: manage-clients to arbitrary code execution through inline javascript policy import

CVE-2026-123966 - Tenda AC19 saveParentControlInfo heap-based overflow

SonicWall Warns of Potential In-the-Wild Exploitation of SSLVPN Flaw That Bypasses MFA

CVE-2026-120839 - WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability

CVE-2026-122041 - Checkout Field Editor for WooCommerce (Pro) <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attachment_id' Parameter via thwcfe_remove_uploaded AJAX Action

CVE-2026-119075 - Registration Form for WooCommerce <= 1.1.4 - Unauthenticated Privilege Escalation to 'user_roles' Parameter at Checkout