SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-75012

MEDIUM · CVSS 6.5 EPSS 0.36% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-17 · Last synced 2026-09-16

CyberRota Analysis

AI-Generated

A vulnerability exists in the Password Configuration Handler of the TOTOLINK EX1200L firmware version 9.3.5u.6146_B20201023, allowing remote attackers to exploit a null pointer dereference in the setPasswordCfg function. This could lead to potential denial of service or application crashes. Organizations using this device should prioritize applying security updates to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-75012
Severity
MEDIUM
CVSS
6.5
EPSS
0.36%

Original NVD Description

A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Password Configuration Handler. The manipulation leads to null pointer dereference. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.