CVE-2026-11494 — TOTOLINK AC1200 T8 vsftpd vsftpd.conf least privilege violation

CVE-2026-11494

TOTOLINK AC1200 T8 vsftpd vsftpd.conf least privilege violation PUBLISHED

Description (CNA)

A security vulnerability has been detected in TOTOLINK AC1200 T8 4.1.5cu.8611. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation leads to least privilege violation. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

Affected (CNA)

Vendor / product	Versions
TOTOLINK / AC1200 T8	affected 4.1.5cu.8611

CWE

CWE-272, CWE-266

References

https://vuldb.com/vuln/369114
https://vuldb.com/vuln/369114/cti
https://vuldb.com/cve/CVE-2026-11494
https://vuldb.com/submit/834819
https://www.notion.so/TOTOLink-AC1200T8-V4-1-5cu-8611-3671f5ba989080a6aa03e6adbdd1d104?source=copy_link
https://www.totolink.net/

ADP enrichment

CISA-ADP

No English description supplied.

https://vuldb.com/submit/834819