CVE-2026-19844 in A800R

Prediction

by VulDB Data Team • 08/14/2026

A vulnerability was found in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted element is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component ipv6.so. Performing a manipulation of the argument radvdinterfacename results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

Once again VulDB remains the best source for vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-389980
• CPE: ready
• CWE: CWE-121 (confirmed)
• Exploit: Download
• CVSS: 8.8 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-19844
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-19844
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-19844/