CVE-2026-1686CWE-119CWE-120

Totolink A3600R app.so setAppEasyWizardConfig buffer overflow

High · published January 30, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
54.9
In the wild
Unconfirmed
What it is

⚡ A sneaky buffer overflow in Totolink A3600R could let attackers take control remotely! 🛠️ Think of it like a restaurant that doesn’t check the credentials of its delivery drivers; anyone could swap out the order for something dangerous without raising an eyebrow. This flaw allows a malicious actor to manipulate an argument, potentially leading to a disastrous outcome. If exploited, an attacker could execute arbitrary code on the device, compromising its functionality and possibly gaining control over your network. Imagine a dinner guest rearranging your kitchen—messy and full of surprises, right? It's a serious threat to your home network's security!

Put simply

Think of it like a restaurant that doesn’t check the credentials of its delivery drivers; anyone could swap out the order for something dangerous without raising an eyebrow. This flaw allows a malicious actor to manipulate an argument, potentially leading to a disastrous outcome. This vulnerability in the function setAppEasyWizardConfig of the Totolink A3600R allows for a buffer overflow by manipulating the apcliSsid argument, leading to potential remote code execution.

What to do

If exploited, an attacker could execute arbitrary code on the device, compromising its functionality and possibly gaining control over your network. Imagine a dinner guest rearranging your kitchen—messy and full of surprises, right? It's a serious threat to your home network's security! It's crucial to patch your Totolink A3600R to version 5.9c.4960 immediately. Review your network security measures and ensure that you’re not using default credentials. Keeping an eye on firmware updates is key! You've got this! By taking these steps, you're not just securing your device, you're becoming a hero in the fight against cyber threats! 🦸‍♂️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00762 · 54.9th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-30T15:02Z
EPSS history
Timeline
  • 30 JAN 15:02Z
    Totolink A3600R app.so setAppEasyWizardConfig buffer overflow
    cvelistv5