Totolink WA300 Critical Buffer Overflow (CVE-2026-7719) Exploited

A critical buffer overflow vulnerability, identified as CVE-2026-7719, has been discovered in Totolink WA300 5.2cu.7112_B20190227. This flaw resides within the loginauth function of the /cgi-bin/cstecgi.cgi component, specifically triggered by manipulating the http_host argument during a POST request. The National Vulnerability Database (NVD) has assigned this vulnerability a CVSSv3.1 score of 9.8, categorizing it as critical.

This vulnerability is remotely exploitable, meaning attackers do not require local network access or authentication to compromise affected devices. The National Vulnerability Database further notes that an exploit for CVE-2026-7719 has already been released publicly. This significantly elevates the risk, as it lowers the bar for attackers to weaponize this flaw and launch widespread attacks.

For defenders, the immediate concern is the public exploit and the ease of remote exploitation. Unpatched Totolink WA300 devices running the specified firmware are effectively wide open. This isn’t a theoretical threat; it’s an active one that demands urgent attention. Attackers will leverage this to gain full control, pivot into internal networks, or integrate devices into botnets.