Is CVE-2026-79912 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-79912?

CVE-2026-79912 has a CVSS v3 severity of HIGH (8.3).

Back

CVE-2026-79912

Description

A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is the function getCurrentTime of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument ntp_server results in command injection. The attack can be initiated remotely. The exploit is now public and may be used.