CVE-2026-6168 | TOTOLINK A7000R up to 9.1.0u.6115 /cgi-bin/cstecgi.cgi setWiFiEasyGuestCfg ssid5g stack-based overflow

A vulnerability classified as critical has been found in TOTOLINK A7000R up to 9.1.0u.6115. The affected element is the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ssid5g causes stack-based buffer overflow.

This vulnerability is registered as CVE-2026-6168. Remote exploitation of the attack is possible. Furthermore, an exploit is available.