EUVD-2026-105337

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to...

CVE-2026-9660

The X2000R (version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ) is vulnerable to multiple exploitable stack-based buffer overflow vulnerabilities within the boa formFilter functionality. A specially crafted authenticated HTTP request targeting the vpnPassword parameter can trigger these flaws, pot...

CVE-2026-26732

TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the vpnUser or vpnPassword parameters in the formFilter function...

CVE-2026-26732: Out-of-bounds Write

TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the vpnUser or vpnPassword parameters in the formFilter function...

CVE-2026-26732

TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the vpnUser or vpnPassword parameters in the formFilter function...

CVE-2026-26732

CVE-2026-26732 affects TOTOLINK A3002RU firmware 2.1.1-B20211108.1455, with a stack-based buffer overflow in the formFilter function triggered by vpnUser/vpnPassword parameters. Public sources (Red Hat, NVD, CNNVD, CVE, Attackerkb, etc.) describe the issue and indicate potential for arbitrary cod...

CVE-2025-8242: Buffer Copy without Checking Size of Input

A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument ip6addr/url/vpnPassword/vpnUser leads to buffer...