CVE-2026-11554 - TOTOLINK CP450 vsftpd vsftpd.conf least privilege violation

Back Back to CVE browser

MEDIUM

TOTOLINK CP450 vsftpd vsftpd.conf least privilege violation

Published Jun 8, 2026

5.3

MEDIUM

CVSS 4.0

EPSS 0.21%

Description

A vulnerability was determined in TOTOLINK CP450 4.1.0cu.747. This vulnerability affects unknown code of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes least privilege violation. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

Vendor TOTOLINK Product n/a Default
n/a
- Version
  4.1.0cu.747
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

TOTOLINK

n/a

Version	Status	Constraints
4.1.0cu.747	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-266

Incorrect Privilege Assignment

CWE-272

References (7)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-35177
Advisory
https://vuldb.com/cve/CVE-2026-11554
third-party-advisory
https://vuldb.com/submit/834821
third-party-advisory
https://vuldb.com/vuln/369164
vdb-entry
https://vuldb.com/vuln/369164/cti
signaturepermissions-required
https://www.notion.so/TOTOLink-CP450-V4-1-0cu-747-3671f5ba989080c3b39ac3984d2ff44d?source=copy_link
exploit
https://www.totolink.net/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-35177		Advisory
https://vuldb.com/cve/CVE-2026-11554		third-party-advisory
https://vuldb.com/submit/834821		third-party-advisory
https://vuldb.com/vuln/369164		vdb-entry
https://vuldb.com/vuln/369164/cti		signaturepermissions-required
https://www.notion.so/TOTOLink-CP450-V4-1-0cu-747-3671f5ba989080c3b39ac3984d2ff44d?source=copy_link		exploit
https://www.totolink.net/		product