⌁ CyberSecurityBoardThreat Intel · CVEs · Products

Tag: Critical CVE

Critical CVEs

CVE-2026-28763 — Critical vulnerability brief

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can…

critical Critical CVE CVE-2026-28763
October 20, 2026
Critical CVEs

CVE-2026-33568 — Critical vulnerability brief

A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can…

critical Critical CVE CVE-2026-33568
October 20, 2026
Critical CVEs

CVE-2026-40615 — Critical vulnerability brief

A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can…

critical Critical CVE CVE-2026-40615
October 20, 2026
Critical CVEs

CVE-2026-40627 — Critical vulnerability brief

An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can…

critical Critical CVE CVE-2026-40627
October 20, 2026
Critical CVEs

CVE-2026-41222 — Critical vulnerability brief

A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can…

critical Critical CVE CVE-2026-41222
October 20, 2026
Critical CVEs

CVE-2026-10133 — Critical vulnerability brief

A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to…

critical Critical CVE CVE-2026-10133
October 20, 2026
Critical CVEs

CVE-2026-10135 — Critical vulnerability brief

A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to…

critical Critical CVE CVE-2026-10135
October 20, 2026
Critical CVEs

CVE-2026-10136 — Critical vulnerability brief

A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead…

critical Critical CVE CVE-2026-10136
October 20, 2026
Critical CVEs

CVE-2026-10137 — Critical vulnerability brief

A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead…

critical Critical CVE CVE-2026-10137
October 20, 2026
Critical CVEs

CVE-2026-10138 — Critical vulnerability brief

A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead…

critical Critical CVE CVE-2026-10138
October 20, 2026