CVE-2026-0731 | TOTOLINK WA1200 5.9c.2914 HTTP Request cstecgi.cgi null pointer dereference

A vulnerability marked as critical has been reported in TOTOLINK WA1200 5.9c.2914. The impacted element is an unknown function of the file cstecgi.cgi of the component HTTP Request Handler. The manipulation leads to null pointer dereference.

This vulnerability is uniquely identified as CVE-2026-0731. The attack is possible to be carried out remotely. Moreover, an exploit is present.

It is recommended to apply restrictive firewalling.