← Database

CVE-2026-93741

CRITICAL CVSS: 10.0 Published: 2026-09-19 Modified: 2026-09-19

Description

A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulation of the argument submit-url results in buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

Affected Platforms

Unknown

Weakness Type

CWE-119, CWE-120

References