CVE-2026-10133

A stack-based buffer overflow exists in the batchupg functionality of the TOTOLINK X2000R router (version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ). The vulnerability is triggered when an authenticated user sends a specially crafted HTTP POST request to the /boafrm/formBuploadSetting page. The p...