CVE-2026-79911 in N600R

Summary

by MITRE • 08/26/2026

A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument Hostname leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsible: VulDB
• Disclosure: 08/26/2026
• Moderation: accepted
• Entry: VDB-395061
• CPE: ready
• CWE: CWE-121 (confirmed)
• Exploit: Download
• CVSS: 10.0 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-79911
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-79911
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-79911/