Description
A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2026-10-20
Score: 9.1 Critical
EPSS: < 1% Very Low
KEV: No
Impact: arbitrary code execution
Action: Patch Immediately
AI Analysis

Impact

The vulnerability is a stack-based buffer overflow in the boa formUploadFile function of the TOTOLINK X2000R router. A specially crafted authenticated HTTP request can overflow the stack and enable arbitrary code execution on the device, potentially compromising the entire network infrastructure.

Affected Systems

Affected devices are TOTOLINK X2000R routers running firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327.

Risk and Exploitability

The CVSS score of 9.1 reflects a high severity vulnerability that can be exploited by attackers who have valid credentials. The EPSS score is not available, but the lack of a KEV listing does not reduce the risk; the flaw remains highly actionable for an attacker with authenticated access.

Generated by OpenCVE AI on October 20, 2026 at 22:40 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the router to the latest TOTOLINK firmware that fixes the buffer overflow.
  • If an upgrade is unavailable, restrict or disable the boa formUploadFile endpoint to prevent authenticated users from accessing it until a patch is applied.
  • Limit administrative access to trusted networks and enforce strong, multi-factor authentication for device management interfaces.

Generated by OpenCVE AI on October 20, 2026 at 22:40 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 23:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 21 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Totolink
Totolink x2000r
Vendors & Products Totolink
Totolink x2000r

Tue, 20 Oct 2026 23:00:00 +0000

Type Values Removed Values Added
Title Stack‑Based Buffer Overflow in TOTOLINK X2000R Boa formUploadFile Enables Arbitrary Code Execution by Authenticated Users

Tue, 20 Oct 2026 20:45:00 +0000

Type Values Removed Values Added
Description A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H'}

Subscriptions

Totolink X2000r
cve-icon MITRE

Status: PUBLISHED

Assigner: talos

Published:

Updated: 2026-10-23T22:09:52.079Z

Reserved: 2026-05-28T10:22:35.362Z

Link: CVE-2026-9817

cve-icon Vulnrichment

Updated: 2026-10-23T20:45:15.616Z

cve-icon NVD

Status : Deferred

Published: 2026-10-20T21:17:22.900

Modified: 2026-10-23T23:19:50.960

Link: CVE-2026-9817

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-21T16:44:14Z

Weaknesses
  • CWE-121

    Stack-based Buffer Overflow