CVE-2026-10137 | Totolink TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 Boa formUpload stack-based overflow

October 20, 2026 Yanac

A vulnerability has been found in Totolink TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 and classified as very critical. This vulnerability affects the function formUpload of the component Boa. The manipulation leads to stack-based buffer overflow.

This vulnerability is documented as CVE-2026-10137. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More