CVE-2026-9869

The Totolink X2000R (version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ) is vulnerable to a stack-based buffer overflow in the boa binary's formTR069Config() functionality. An authenticated attacker can trigger this by sending a specially crafted HTTP POST request to the /boafrm/formTR069Config pa...