Critical severity10.0NVD Advisory· Published Sep 19, 2026

CVE-2026-93741

Description

A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulation of the argument submit-url results in buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

Patches

Vulnerability mechanics

References

github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/ToTolink/A3002MU/bof-formWlWds.mdnvd
vuldb.com/cve/CVE-2026-93741nvd
vuldb.com/submit/914020nvd
vuldb.com/vuln/407551nvd
vuldb.com/vuln/407551/ctinvd
www.totolink.netnvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000