A vulnerability classified as critical was found in Totolink N200RE V5. This affects the function formMapDelDevice. Such manipulation of the argument macstr/bandstr leads to command injection.

This vulnerability is traded as CVE-2026-36841. The attack may be launched remotely. There is no exploit available.