Is CVE-2026-75012 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-75012?

CVE-2026-75012 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-75012

Description

A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Password Configuration Handler. The manipulation leads to null pointer dereference. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.