Critical · 9.8 CVE-2026-36841 EUVD-2026-26231GHSA-3hw6-vmjp-6cj5

TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevic…

Published Apr 29, 2026 · Updated Apr 29, 2026 · Assigned by mitre

Description

TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice function.

References

https://github.com/0xmania/cve/tree/main/TOTOLINK-N200RE_V5-cstecgi-formMapDelDevice-CommandInjection