EUVD-2026-105327

A heap-based buffer overflow vulnerability exists in the boa formUpload functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerabili...

CVE-2026-10136

The Totolink X2000R router (version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ) is vulnerable to a heap-based buffer overflow in the boa binary's formUpload() functionality. The root cause is located in the get_filename_from_buf() function, where the length passed to strncpy is derived from the in...

EUVD-2026-105326

A stack-based buffer overflow vulnerability exists in the boa formUpload functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this...

EUVD-2026-105325

A OS command injection vulnerability exists in the boa formUpload functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2026-10138

A critical OS command injection vulnerability exists in the boa formUpload() functionality of the TOTOLINK X2000R router (version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ). The vulnerability stems from a lack of sanitization on the devicemac input parameters provided via HTTP POST requests. An a...

CVE-2026-10137

A stack-based buffer overflow exists in the boa formUpload() functionality of the Totolink X2000R (version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ). The vulnerability occurs because the formUpload function fails to perform length checks when using strcpy to copy the value of the devicemac%d HTT...

Realtek rtl819x Jungle SDK boa formUpload firmware update vulnerability

Talos Vulnerability Report TALOS-2023-1874 Realtek rtl819x Jungle SDK boa formUpload firmware update vulnerability July 8, 2024 CVE Number CVE-2023-34435 SUMMARY A firmware update vulnerability exists in the boa formUpload functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted...

Realtek rtl819x Jungle SDK Data Forgery Issue Vulnerability

The Realtek rtl819x Jungle SDK is a driver for a wireless LAN chip from China's Realtek Semiconductor Realtek. A data forgery issue vulnerability exists in Realtek rtl819x Jungle SDK version 3.4.11, which stems from a firmware update vulnerability in the boa formUpload function that can lead to...

CVE-2023-34435: Improper Verification of Cryptographic Signature

A firmware update vulnerability exists in the boa formUpload functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted network packets can lead to arbitrary firmware update. An attacker can provide a malicious file to trigger this vulnerability...

PT-2024-12481 · Realtek · Realtek Rtl819X Jungle Sdk

Name of the Vulnerable Software and Affected Versions: Realtek rtl819x Jungle SDK version 3.4.11 Description: A firmware update vulnerability exists in the boa formUpload functionality. A specially crafted network packet can lead to arbitrary firmware update. An attacker can provide a malicious...