Description
A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2026-10-20
Score: 9.1 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

A stack-based buffer overflow in the boa formMapDelDevice macstr function of TOTOLINK-X2000R can be triggered by a specially crafted HTTP request that requires authentication. The overflow allows an attacker to execute arbitrary code on the device, compromising confidentiality, integrity, and availability. This vulnerability aligns with CWE‑121 (Stack-based Buffer Overflow).

Affected Systems

The affected product is Totolink X2000R, firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. No other vendors or versions are mentioned in the advisory.

Risk and Exploitability

With a CVSS score of 9.1 the issue is considered high severity. EPSS data is not available, and the CVE is not listed in the CISA KEV catalog. An attacker must first authenticate to the router’s management interface, then issue a malicious HTTP request. Once exploited, the attacker gains arbitrary code execution and full control over the device.

Generated by OpenCVE AI on October 20, 2026 at 22:03 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the latest firmware for the Totolink X2000R that addresses the buffer overflow.
  • If a firmware update is not yet available, disable the boa formMapDelDevice macstr command or block the management port via firewall rules.
  • Segment the network to isolate router management traffic and enforce least privilege on authenticated users.
  • Enable logging and monitor for failed authentication attempts targeting the router.

Generated by OpenCVE AI on October 20, 2026 at 22:03 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 28 Oct 2026 22:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 21 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Totolink
Totolink x2000r
Vendors & Products Totolink
Totolink x2000r

Tue, 20 Oct 2026 22:30:00 +0000

Type Values Removed Values Added
Title Stack-based buffer overflow in Totolink X2000R enables remote code execution

Tue, 20 Oct 2026 20:45:00 +0000

Type Values Removed Values Added
Description A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H'}

Subscriptions

Totolink X2000r
cve-icon MITRE

Status: PUBLISHED

Assigner: talos

Published:

Updated: 2026-10-28T20:05:00.158Z

Reserved: 2026-04-22T21:49:54.197Z

Link: CVE-2026-41223

cve-icon Vulnrichment

Updated: 2026-10-28T17:53:16.343Z

cve-icon NVD

Status : Deferred

Published: 2026-10-20T21:17:18.783

Modified: 2026-10-28T20:17:25.487

Link: CVE-2026-41223

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-21T16:43:31Z

Weaknesses
  • CWE-121

    Stack-based Buffer Overflow