Mehrere Schwachstellen (CVE-2026-89274, CVE-2026-92229, CVE-2026-93738, CVE-2026-93739, CVE-2026-93740, CVE-2026-93741, CVE-2026-93742) in Totolink
⚠️ CVE-Referenzen:
CVE-2026-89274
CVE-2026-92229
CVE-2026-93738
CVE-2026-93739
CVE-2026-93740
CVE-2026-93741
CVE-2026-93742
Totolink - A3002mu - CRITICAL - CVE-2026-93740.
A security flaw has been detected in the Totolink A3002MU router, particularly within the formWlEncrypt function located in the /boafrm directory. This vulnerability allows for a remote buffer overflow attack through manipulation of the 'submit-url' parameter. Attackers can exploit this flaw to execute unauthorized code, potentially compromising the device's functionality. With publicly available exploit code, it is crucial for users and administrators to take immediate steps to secure their affected devices.
BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io
Quelle: securityvulnerability.io