CVE-2026-40615 | Totolink TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 boa formParentControl deviceName buffer overflow

October 20, 2026 Yanac

A vulnerability identified as very critical has been detected in Totolink TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. This impacts the function formParentControl of the component boa. The manipulation of the argument deviceName leads to buffer overflow.

This vulnerability is uniquely identified as CVE-2026-40615. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More