A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument topicurl results in buffer overflow. Remote exploitation of the attack is possible.

A buffer overflow vulnerability has been identified in TOTOLINK CP450 version 4.1.0. The flaw resides in an unknown function within the /cgi-bin/cstecgi.cgi file. Manipulation of the 'topicurl' argument triggers the buffer overflow condition. The vulnerability allows remote exploitation, making it accessible to attackers over the network without physical access. No authentication requirements are specified, potentially broadening the attack surface. The vulnerability is tracked as CVE-2026-85031 and has been assigned a high criticality rating. TOTOLINK CP450 is a networking device, meaning exploitation could impact network availability and integrity. No patch or mitigation details are provided in the current disclosure. The issue has been documented across multiple vulnerability databases including NVD and VulDB.