High severity8.8NVD Advisory· Published Feb 17, 2026· Updated Jun 17, 2026

CVE-2026-26736

Description

TOTOLINK A3002RU_V3 V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the static_ipv6 parameter in the formIpv6Setup function.

Affected products

Totolink/A3002ru Firmware
cpe:2.3:o:totolink:a3002ru_firmware:*:*:*:*:*:*:*:*
Range: <=3.0.0-b20220304.1804
Totolink/A3002RUcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: V3.0.0-B20220304.1804

Patches

Vulnerability mechanics

References

github.com/0xmania/cve/tree/main/TOTOLINK-A3002RUV3.0-boa-formIpv6Setup-StackOverflownvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000