CVE-2026-90606

CVE-2026-90606 is a buffer overflow in the boa component of Totolink A3002MU (firmware Hh-B20211125.1046). The vulnerable function is formIpv6Setup in the file /boafrm/formIpv6Setup; manipulation of the argument static_ipv6 triggers the overflow. The vulnerability is exploitable remotely with low...