CVE-2026-36841

TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice function...

CVE-2026-36841

CVE-2026-36841 affects TOTOLINK N200RE V5. The root cause is a command injection in the formMapDelDevice function exploited via the macstr and bandstr parameters. This leads to arbitrary command execution with high impact on confidentiality, integrity, and availability (per CVSS 3.1 metrics: AV:N...

CVE-2026-36837

TOTOLINK A3002RU V3 = V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the hostname parameter in the formMapDelDevice function...

CVE-2026-36841

TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice function...