Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.1
CVE-2026-11494: TOTOLINK AC1200 T8: Remote Privilege Escalation via vsftpd Configuration
CVE-2026-11494 · published 4 months ago
Summary
A security flaw in the TOTOLINK AC1200 T8's vsftpd configuration file allows an attacker to gain unauthorized access to the device. This could lead to changes being made to the device's settings or even complete control of the device. To protect your device, update to the latest firmware version if available.
Original advisory text
A security vulnerability has been detected in TOTOLINK AC1200 T8 4.1.5cu.8611. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation leads to least...
A security vulnerability has been detected in TOTOLINK AC1200 T8 4.1.5cu.8611. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation leads to least privilege violation. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-266Incorrect Privilege Assignment
CWE-272Least Privilege Violation
Timeline
Published8 Jun 2026
Updated29 Oct 2026
First seen8 Jun 2026
Sources
CVE-2026-11494 · NVD
Track software like this
Free during beta