SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-85031

CRITICAL · CVSS 9.9 EPSS 0.58% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-15

CyberRota Analysis

AI-Generated

A critical buffer overflow vulnerability exists in the TOTOLINK CP450 4.1.0, specifically within the /cgi-bin/cstecgi.cgi file, which can be exploited remotely by manipulating the topicurl argument. This flaw could allow attackers to execute arbitrary code, potentially compromising the device and the network it is connected to. Organizations using this product should prioritize patching or mitigating this vulnerability to prevent unauthorized access and potential system compromise.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-85031
Severity
CRITICAL
CVSS
9.9
EPSS
0.58%

Original NVD Description

A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument topicurl results in buffer overflow. Remote exploitation of the attack is possible.