← Database

CVE-2026-8137

HIGH CVSS: 8.8 Published: 2026-05-08 Modified: 2026-06-17

Description

A vulnerability has been found in Totolink X5000R 9.1.0u.6369_B20230113. This vulnerability affects the function sub_458E40 of the file /boafrm/formDdns. The manipulation of the argument submit-url leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Affected Platforms

Unknown

Weakness Type

CWE-119, CWE-120

References