CVE-2026-79912 in N600R

Riassunto

di MITRE • 26/08/2026

A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is the function getCurrentTime of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument ntp_server results in command injection. The attack can be initiated remotely. The exploit is now public and may be used.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: VulDB
• Divulgazione: 26/08/2026
• Moderazione: accettato
• Voce: VDB-395062
• CPE: pronto
• CWE: CWE-77 (confermato)
• Sfruttamento: Scaricare
• CVSS: 8.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-79912
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-79912
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-79912/