CVE-2026-10136 in Totolinkالمعلومات

الملخص

بحسب MITRE • 20/10/2026

A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

مسؤول

Talos

حجز

29/05/2026

إفشاء

20/10/2026

الاعتدال

تمت الموافقة

إدخال

VDB-423041

EPSS

0.00000

KEV

لا

النشاطات

منخفض جدًا

المصادر

Want to know what is going to be exploited?

We predict KEV entries!