CVE-2026-123961

{
  "etk_id": "ETK-2026-3823",
  "cve_id": "CVE-2026-123961",
  "display_id": "CVE-2026-123961",
  "ghsa_id": "GHSA-fjhm-mr3w-93p9",
  "euvd_id": "EUVD-2026-119099",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Buffer overflow in TOTOLINK CA300-PoE configuration handler",
  "summary": "TOTOLINK CA300-PoE devices running firmware 6.2c.884 are affected by a buffer overflow in a Wi-Fi configuration handler. A remote attacker with the required access privileges may be able to compromise the affected device or disrupt its operation. Exposure depends on the attacker being able to reach the management service and authenticate.",
  "mitigation": "Restrict access to the device management interface to trusted administrative networks and accounts. Monitor for a vendor firmware update and apply it when a corrected release is available.",
  "vendor": "TOTOLINK",
  "product": "CA300-PoE",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "6.2c.884"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "CA300-PoE",
      "purl": null
    }
  ],
  "cwes": [
    120
  ],
  "cvss_score": 9.4,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 20.226407216666665,
  "t0_at": "2026-11-07T10:15:21.410000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-07T10:15:21.410000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-07T10:15:21.410000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-123961"
    }
  }
}