Stack-based Buffer Overflow Vulnerabilities in Totolink X2000R Network Configuration

CVE-2026-42022

What is CVE-2026-42022?

Totolink's X2000R router has been found to contain multiple stack-based buffer overflow vulnerabilities within its boa formIpv6Setup static network configuration feature. An attacker could exploit these vulnerabilities through specially crafted HTTP requests, particularly targeting the static_dns2 parameter, potentially leading to arbitrary code execution on the device. Successful exploitation requires authentication, highlighting a significant risk to the security of network configurations.

References