CVE-2026-40615

A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigg...

CVE-2026-41222

A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this...

CVE-2026-40615

A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigg...

CVE-2026-40615

A stack-based buffer overflow vulnerability exists in the boa web server's formParentControl function of the TOTOLINK X2000R (specifically version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ). The flaw is triggered when an authenticated attacker sends a specially crafted HTTP POST request containin...

CVE-2026-41222

A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this...

CVE-2026-41222

A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this...

EUVD-2026-105346

A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigg...

CVE-2026-40615

A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigg...

CVE-2026-41222

The Totolink X2000R router (version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ) is vulnerable to a stack-based buffer overflow in the boa binary's formParentControl function. An authenticated attacker can trigger this by sending a specially crafted HTTP POST request to the /boafrm/formParentContro...

PT-2026-118655

A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 version has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the deviceName function of the boa formParentControl component. A specially crafted HTTP request can lead to arbitrary code execution,...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the boa formParentControl url function, which may allow authenticated attackers to execute arbitrary code by constructing specially crafted HTTP requests...