Stack-Based Buffer Overflow in TOTOLINK A3002RU Router
CVE-2026-36837

7.5HIGH

Key Information:

Vendor

TOTOLINK
Status
A3002RU
Vendor
CVE Published:
29 April 2026

What is CVE-2026-36837?

The TOTOLINK A3002RU router, specifically version V3.0.0-B20220304.1804 and earlier, has been identified to contain a critical flaw where a stack-based buffer overflow can be exploited through the hostname parameter within the formMapDelDevice function. This vulnerability poses a significant risk as it can allow an attacker to execute arbitrary code, potentially compromising the device and the network it is connected to. Users are strongly advised to upgrade to the latest firmware version to mitigate this security risk.

References

https://github.com/0xmania/cve/tree/main/TOTOLINK-A3002RU...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.