CVE-2026-82539: critical vulnerability in TOTOLINK A720R
TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption
Published · Updated
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.4epss 0.8%
exploitation probability
0.8%top 42% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
Affected products
TOTOLINK · A720Rpublic PoCs found — 1
cve_referencegithub.com/Xernary/CVE-2026-82539★ 4⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — TOTOLINK A720R
In the same product, most dangerous first.
CVE-2025-4270MEDIUMTOTOLINK A720R Config cstecgi.cgi information disclosureEPSS 14.0%CVE-2024-8869LOWTOTOLINK A720R exportOvpn os command injectionEPSS 1.7%CVE-2025-4268MEDIUMTOTOLINK A720R cstecgi.cgi missing authenticationEPSS 1.1%CVE-2025-9303HIGHTOTOLINK A720R cstecgi.cgi setParentalRules buffer overflowEPSS 0.9%CVE-2025-4271MEDIUMTOTOLINK A720R cstecgi.cgi information disclosureEPSS 0.7%CVE-2025-4269MEDIUMTOTOLINK A720R Log cstecgi.cgi access controlEPSS 0.6%