Category: Critical CVEs

♡Follow0

Critical CVEs

CVE-2026-101503 — Critical vulnerability brief

CVSS 9.9

Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low…

critical Critical CVE CVE-2026-101503

October 20, 2026

♡Follow0

Critical CVEs

CVE-2026-101446 — Critical vulnerability brief

CVSS 9.9

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are…

critical Critical CVE CVE-2026-101446

October 20, 2026

♡Follow0

Critical CVEs

CVE-2026-9659 — Critical vulnerability brief

CVSS 9.1

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can…

critical Critical CVE CVE-2026-9659

October 20, 2026

♡Follow0

Critical CVEs

CVE-2026-42020 — Critical vulnerability brief

CVSS 9.1

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can…

critical Critical CVE CVE-2026-42020

October 20, 2026

♡Follow0

Critical CVEs

CVE-2026-28763 — Critical vulnerability brief

CVSS 9.1

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can…

critical Critical CVE CVE-2026-28763

October 20, 2026

♡Follow0

Critical CVEs

CVE-2026-33568 — Critical vulnerability brief

CVSS 9.1

A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can…

critical Critical CVE CVE-2026-33568

October 20, 2026

♡Follow0

Critical CVEs

CVE-2026-40615 — Critical vulnerability brief

CVSS 9.1

A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can…

critical Critical CVE CVE-2026-40615

October 20, 2026

♡Follow0

Critical CVEs

CVE-2026-40627 — Critical vulnerability brief

CVSS 9.1

An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can…

critical Critical CVE CVE-2026-40627

October 20, 2026

♡Follow0

Critical CVEs

CVE-2026-41222 — Critical vulnerability brief

CVSS 9.1

A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can…

critical Critical CVE CVE-2026-41222

October 20, 2026

♡Follow0

Critical CVEs

CVE-2026-41223 — Critical vulnerability brief

CVSS 9.1

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can…

critical Critical CVE CVE-2026-41223

October 20, 2026