https://nico-security.com/tags/%23cve-2025-63821/Recent content in #CVE-2025-63821 on Nico's Security ResearchHugo -- 0.166.0en-usSat, 12 Sep 2026 00:00:00 +0000https://nico-security.com/posts/totolink-a720r/Sat, 12 Sep 2026 00:00:00 +0000https://nico-security.com/posts/totolink-a720r/<h2 id="description">Description</h2> <p>I bought a TOTOLINK A720R specifically for this. TOTOLINK was a vendor I had never done any research on, so I picked up one of their models to take a look. It looked like an easy target: a small SOHO router with a web-based admin panel and the usual embedded stack. What started as a quick look at the web interface turned into three separate findings, all reachable through the same binary, <code>cstecgi.cgi</code>, which handles almost the entire web UI.</p>