Live › vulnerability › CVE-2026-42026
Go to dashboardThe boa web server's formIpv6Setup handler on the TOTOLINK X2000R router copies the dhcp_dns2 parameter into a fixed-size stack buffer without checking its length. An attacker with a logged-in session can send a crafted HTTP request to run arbitrary code on the router.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| X2000R | vendor | TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the dhcp_dns2 parameter.
This page as .md · .json · in your agent: get_signal("CVE-2026-42026")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.