# ca300-poe\_firmware

Published articles for ca300-poe\_firmware.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## CVE-2026-124059 - TOTOLINK CA300-PoE cstecgi.cgi setWiFiWdsAddConfig buffer overflow

DevFeed: [CVE-2026-124059 - TOTOLINK CA300-PoE cstecgi.cgi setWiFiWdsAddConfig buffer overflow](<https://devfeed.tech/articles/cve-2026-124059-totolink-ca300-poe-cstecgi-cgi-setwifiwdsaddconfig-buffer-overflow-122259.md>)

Original publisher: [Read original article](<https://cvefeed.io/vuln/detail/CVE-2026-124059>)

Author: CVEFEED.io; vuldb.com

Published: 2026-11-07T19:17:28Z

Content type: news

Language: en

Sources: [Latest High/Critical Vulnerabilitiy Feed](<https://devfeed.tech/sources/latest-high-critical-vulnerabilitiy-feed.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [buffer-overflow](<https://devfeed.tech/tags/buffer-overflow.md>), [ca300-poe](<https://devfeed.tech/tags/ca300-poe.md>), [ca300-poe-firmware](<https://devfeed.tech/tags/ca300-poe-firmware.md>), [critical](<https://devfeed.tech/tags/critical.md>), [cve-2026-124059](<https://devfeed.tech/tags/cve-2026-124059.md>), [totolink](<https://devfeed.tech/tags/totolink.md>)

### AI overview

CVE-2026-124059 affects TOTOLINK CA300-PoE version 6.2c.884: manipulating the `ApCliKeyStr` argument in `setWiFiWdsAddConfig` in `/cgi-bin/cstecgi.cgi` can cause a buffer overflow. The description says the attack may be initiated remotely and that an exploit has been publicly disclosed. It lists the severity as 9.1 (critical).

### Source excerpt

CVE ID :CVE-2026-124059 Published : Nov. 7, 2026, 7:17 p.m. | 47 minutes ago Description :A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ApCliKeyStr leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. Severity: 9.1 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...