CVE-2026-19813
published 2026-08-14CVE-2026-19813: A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setMacFilterRules of the file…
PriorityP270high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.60%
46.5th percentile
A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Such manipulation of the argument Comment leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| totolink | a800r | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv4.07.4HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
TOTOLINK A800R 4.1.2cu.5137_B20200730 firewall.so /cgi-bin/cstecgi.cgi setMacFilterRules Comment stack-based overflow
vuldb·2026-08-14
CVE-2026-19813 [CRITICAL] TOTOLINK A800R 4.1.2cu.5137_B20200730 firewall.so /cgi-bin/cstecgi.cgi setMacFilterRules Comment stack-based overflow
A vulnerability was found in TOTOLINK A800R 4.1.2cu.5137_B20200730. It has been declared as critical. This impacts the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Such manipulation of the argument Comment leads to stack-based buffer overflow.
This vulnerability is listed as CVE-2026-19813. The attack may be performed from remote. In addition, an exploit is available.
GHSA
A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730.
ghsa_unreviewed·2026-08-14
CVE-2026-19813 [HIGH] CWE-119 A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730.
A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Such manipulation of the argument Comment leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-14
Published