CVE-2026-75013: Totolink EX1200L

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation results in null pointer dereference. The attack can be launched remotely. The exploit is now public and may be used.

Affected products

• Totolink EX1200L: version 9.3.5u.6146_B20201023 only

Published 2026-08-17. Last modified 2026-08-20.