High severity8.8NVD Advisory· Published Feb 17, 2026· Updated Jun 17, 2026

CVE-2026-26732

Description

TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the vpnUser or vpnPassword` parameters in the formFilter function.

Affected products

Totolink/A3002ru Firmware
cpe:2.3:o:totolink:a3002ru_firmware:2.1.1-b20211108.1455:*:*:*:*:*:*:*
Totolink/A3002RUcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: V2.1.1-B20211108.1455

Patches

Vulnerability mechanics

References

github.com/0xmania/cve/tree/main/TOTOLINK-A3002RU-boa-formFilter-StackOverflownvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000