Buffer Overflow Vulnerability in TOTOLINK CP450 Router
CVE-2026-85031

9.4CRITICAL

Key Information:

Vendor

Totolink
Status
Cp450
Vendor
CVE Published:
3 September 2026

What is CVE-2026-85031?

A buffer overflow vulnerability exists in the TOTOLINK CP450 router running version 4.1.0. This issue is caused by a manipulation of the 'topicurl' argument in the /cgi-bin/cstecgi.cgi file, leading to the potential for remote exploitation. If successfully exploited, an attacker could execute arbitrary code on the device, making it crucial for users to promptly apply available security updates to mitigate this risk.

Affected Version(s)

CP450 4.1.0

References

https://vuldb.com/vuln/398296
vdb-entrytechnical-description
https://vuldb.com/vuln/398296/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-85031
third-party-advisory

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

summadeus (VulDB User)
VulDB Vulnerability Moderation Team
.