CVE-2026-82539— TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption
Quick assessment
Affected
TOTOLINK A720R
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 TOTOLINK A720R（固件版本 4.1.5cu.630_B20250509）中发现了一个漏洞。该漏洞位于 MAC 过滤组件中 文件的 函数。通过操纵参数 可引发内存损坏。该攻击可远程发起。此漏洞已被公开披露，并可能已被利用。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-82539
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
内存缓冲区边界内操作的限制不恰当
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-82539
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-82539
请登录查看更多情报信息。
Proof of Concept for CVE-2026-82539 (1)
Other References for CVE-2026-82539 (3)
-
🔗 CVE-2026-82539 in A720R third-party-advisory
-
🔗 Submit #888696: TOTOLINK A720R V4.1.5cu.630_B20250509 Buffer Overflow third-party-advisory
-
🔗 CVE-2026-82539 TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption vdb-entry technical-description
IV. Related Vulnerabilities
Same product: A720R
-
CVE-2025-9303
TOTOLINK A720R cstecgi.cgi setParentalRules buffer overflow -
CVE-2025-4271
TOTOLINK A720R cstecgi.cgi information disclosure -
CVE-2025-4270
TOTOLINK A720R Config cstecgi.cgi information disclosure -
CVE-2025-4269
TOTOLINK A720R Log cstecgi.cgi access control -
CVE-2025-4268
TOTOLINK A720R cstecgi.cgi missing authentication
Same vendor: TOTOLINK
-
CVE-2026-79912
TOTOLINK N600R cstecgi.cgi getCurrentTime command injection -
CVE-2026-79911
TOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based o -
CVE-2026-75013
TOTOLINK EX1200L cstecgi.cgi setWizardCfg null pointer deref -
CVE-2026-75012
TOTOLINK EX1200L Password Configuration cstecgi.cgi setPassw -
CVE-2026-19847
TOTOLINK A800R wps.so cstecgi.cgi setWiFiWpsConfig stack-bas
Same weakness: CWE-119
-
CVE-2026-81581
User input in WibuKey is used (without proper sanitization) -
CVE-2026-79069
Google Chrome 缓冲区错误漏洞 -
CVE-2022-50999
Nokogiri before 1.13.5 Integer Overflow via libxml2 -
CVE-2021-47996
Nokogiri before 1.11.4 Multiple Vulnerabilities via libxml2 -
CVE-2026-55586
SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX
V. Comments for CVE-2026-82539
No comments yet