https://vulnfeed.org/Every disclosure, as it lands. Critical-only feed available.enhttps://vulnfeed.org/cve/CVE-2026-123961/https://vulnfeed.org/cve/CVE-2026-123961/Sat, 07 Nov 2026 11:17:01 +0000A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument KeyStr leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.https://vulnfeed.org/cve/CVE-2026-123960/https://vulnfeed.org/cve/CVE-2026-123960/Sat, 07 Nov 2026 10:00:25 +0000A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument pppoeUser/priDns/secDns can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.https://vulnfeed.org/cve/CVE-2026-123959/https://vulnfeed.org/cve/CVE-2026-123959/Sat, 07 Nov 2026 09:45:26 +0000A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. The impacted element is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument langType results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.https://vulnfeed.org/cve/CVE-2026-123958/https://vulnfeed.org/cve/CVE-2026-123958/Sat, 07 Nov 2026 09:00:21 +0000A vulnerability was identified in TOTOLINK CA300-PoE 6.2c.884. The affected element is the function setLanConfig of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument lanDns/lanSecDns/langType leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.https://vulnfeed.org/cve/CVE-2026-123957/https://vulnfeed.org/cve/CVE-2026-123957/Sat, 07 Nov 2026 08:15:13 +0000A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. Impacted is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ipStart causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.