What is CVE-2026-75013?

CVE-2026-75013 is a medium-severity vulnerability in Totolink Ex1200l, classified under Improper Resource Shutdown or Release. CVSS score: 6.5/10. Published 2026-08-17.

How severe is CVE-2026-75013?

Medium severity. CVSS v3 base score is 6.5 out of 10.

NULL pointer dereference in Totolink Ex1200l

CVE-2026-75013

A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation results in null pointer dereference. The attack can be launched remotely. The exploit is now public and may be used.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Totolink Ex1200l — versions 9.3.5u.6146_B20201023

Weakness classification (CWE)

References

cna@vuldb.com (technical-description, vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (exploit)
cna@vuldb.com (product)

Frequently asked questions

What is CVE-2026-75013?: CVE-2026-75013 is a medium-severity vulnerability in Totolink Ex1200l, classified under Improper Resource Shutdown or Release. CVSS score: 6.5/10. Published 2026-08-17.
How severe is CVE-2026-75013?: Medium severity. CVSS v3 base score is 6.5 out of 10.