Mehrere Schwachstellen (CVE-2026-89274, CVE-2026-92229, CVE-2026-93738, CVE-2026-93739, CVE-2026-93740, CVE-2026-93741, CVE-2026-93742) in Totolink

Totolink - A3002mu - CRITICAL - CVE-2026-93740. A security flaw has been detected in the Totolink A3002MU router, particularly within the formWlEncrypt function located in the /boafrm directory. This vulnerability allows for a remote buffer overflow attack through manipulation of the 'submit-url' parameter. Attackers can exploit this flaw to execute unauthorized code, potentially compromising the device's functionality. With publicly available exploit code, it is crucial for users and administrators to take immediate steps to secure their affected devices. BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io
Quelle: securityvulnerability.io