CVE-2026-75013 in EX1200L

Prediction

by VulDB Data Team • 08/17/2026

A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation results in null pointer dereference. The attack can be launched remotely. The exploit is now public and may be used.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-391273
• CPE: ready
• CWE: CWE-476 (confirmed)
• Exploit: Download
• CVSS: 6.5 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-75013
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75013
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-75013/