CVE-2026-41223

A stack-based buffer overflow exists in the boa formMapDelDevice macstr functionality of the Totolink X2000R (version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ). An authenticated attacker can send a specially crafted HTTP POST request to the /boafrm/formMapDelDevice page. The vulnerability is tri...