CVE-2026-42023 — totolink / Totolink

CVE-2026-42023

totolink / Totolink PUBLISHED

Description (CNA)

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the static_ipv6 parameter.

Affected (CNA)

Vendor / product	Versions
totolink / Totolink	affected TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327

CWE

CWE-121

References

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2395

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.