Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-44089 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

Totolink EX1200L router is vulnerable to Buffer Overflow in the login functionality in cgi-bin/cstecgi.cgi endpoint. This vulnerability could be exploited to cause the program to crash and to execute code remotely. This allows the attacker to perform actions as root including reading and editing data, as well as bricking the router. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 9.3.5u.6146_B20201023 but may also affect other versions.

Metrics

CVSS 3.x Severity and Vector Strings:

NDDVolerionCVSS-B:8.1 HIGHVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://cert.pl/en/posts/2026/06/CVE-2026-44089 [email protected]AdvisoryVendor
https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/217/ids/36.html [email protected]ProductVendor

Weakness Enumeration

CWE-IDCWE NameSource
CWE-121Stack-based Buffer Overflow[email protected]

Affected Products

ProductVersions
Totolink EX1200L
9.3.5u.6146_B20201023

CPE

  • cpe:2.3:o:totolink:ex1200l_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:totolink:ex1200l:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

2 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-44089
NVD Published Date:
Jun 23, 2026
NVD Last Modified:
Jun 23, 2026
Source:
[email protected]