CVE-2026-36841_CVE-2026-36841

9.8 / 10

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice function.

AI Analysis

Command injection vulnerability in TOTOLINK N200RE V5 via macstr and bandstr parameters

Basic Information

ID CVE-2026-36841

Source mitre

Published Apr 29, 2026 at 00:00

Modified Apr 29, 2026 at 20:28

Affected Product

Vendor n/a

Product n/a

Version n/a

Affected Versions n/a n/a n/a

CWE Classification

CWE-77

AI Assessment

AI Score 9.8 / 10

AI Severity Critical

Vendor TOTOLINK

Product N200RE

Version V5

References

github.com /0xmania/cve/tree/main/TOTOLINK-N200RE_V5-cstecgi-formMapDelDevice-CommandInjection

{
    "lastseen": "",
    "description": "TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice function.",
    "published": "2026-04-29T00:00:00.000Z",
    "modified": "2026-04-29T20:28:26.618Z",
    "type": "cve",
    "title": "CVE-2026-36841",
    "source": "mitre",
    "references": "https://github.com/0xmania/cve/tree/main/TOTOLINK-N200RE_V5-cstecgi-formMapDelDevice-CommandInjection",
    "id": "CVE-2026-36841",
    "bulletinFamily": "",
    "cwe": [
        "CWE-77"
    ],
    "cvelist": null,
    "sourceData": "n/a n/a n/a",
    "sourceHref": "",
    "cvss": {
        "score": 9.8,
        "severity": "CRITICAL",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "n/a",
    "version": "n/a",
    "vendor": "n/a",
    "ai_description": "Command injection vulnerability in TOTOLINK N200RE V5 via macstr and bandstr parameters",
    "ai_severity": "Critical",
    "ai_vendor": "TOTOLINK",
    "ai_product": "N200RE",
    "ai_version": "V5",
    "ai_score": 9.8
}