CVE-2026-28763

A stack-based buffer overflow vulnerability exists in the boa web server's formMapDelDevice hostname functionality in the X2000R router (version: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ). The flaw is caused by an unchecked strcpy operation that copies an HTTP POST hostname parameter into a fixe...