Is CVE-2026-85031 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-85031 being exploited in the wild.

How severe is CVE-2026-85031?

Critical severity, with a CVSS score of 9.9, published 3 September 2026.

Is there a fix for CVE-2026-85031?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-85031 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-85031?

Check whether you run TOTOLINK CP450 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-85031: TOTOLINK CP450 buffer overflow in cstecgi.cgi

CVE-2026-85031 · Severity: critical · CVSS 9.9 · Published 2026-09-03

TOTOLINK CP450 is a networking device used in corporate and home office environments. A remote attacker can exploit a buffer overflow vulnerability in the web administration interface by sending a specially crafted request to the cstecgi.cgi component, potentially allowing unauthorized code execution or device compromise without authentication.

Technologies: TOTOLINK CP450. Vendors: TOTOLINK.

Quick answers

Is CVE-2026-85031 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-85031 being exploited in the wild.
How severe is CVE-2026-85031?: Critical severity, with a CVSS score of 9.9, published 3 September 2026.
Which products and versions are affected?: TOTOLINK CP450 4.1.0.
Is there a fix for CVE-2026-85031?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-85031 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-85031?: Check whether you run TOTOLINK CP450 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a stack-based buffer overflow in the /cgi-bin/cstecgi.cgi endpoint of TOTOLINK CP450 version 4.1.0. The flaw exists in an unknown function that processes the "topicurl" parameter without proper input validation or bounds checking. The vulnerability is remotely exploitable over the network without requiring prior authentication. A successful exploit allows an attacker to execute arbitrary code on the device with the privileges of the web service process, potentially gaining full device control.

Affected products

TOTOLINK CP450 4.1.0

Timeline

2026-09-03: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.