CVE-2026-10141 — totolink / Totolink

CVE-2026-10141

totolink / Totolink PUBLISHED

Description (CNA)

A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted firmware binary can lead to arbitrary firmware update. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Affected (CNA)

Vendor / product	Versions
totolink / Totolink	affected TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327

CWE

CWE-347

References

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2440

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.