CVE-2026-82539

CRITICAL 9.1

TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption

CVSS Score

9.1

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

CWE	CWE-119
Vendor	totolink
Product	a720r
Published	Aug 30, 2026

Stay Ahead of the Next One

Get instant alerts for totolink a720r

Be the first to know when new critical vulnerabilities affecting totolink a720r are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

TOTOLINK / A720R

4.1.5cu.630_B20250509

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/397055 vuldb.com: https://vuldb.com/vuln/397055/cti vuldb.com: https://vuldb.com/cve/CVE-2026-82539 vuldb.com: https://vuldb.com/submit/888696 github.com: https://github.com/Xernary/CVE-2026-82539 totolink.net: https://www.totolink.net/

Credits

Nicola Giuffrida 🔍 Xernary (VulDB User) Xernary (VulDB User)