Stack-based Buffer Overflow in Totolink A3002MU HTTP Request Handler
CVE-2026-6194

8.7HIGH

Key Information:

Vendor: Totolink
Status: A3002mu
Vendor: CVE Published:; 13 April 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-6194?

A vulnerability in the Totolink A3002MU model, specifically in the HTTP Request Handler function sub_410188, has been identified. This weakness is triggered through an improper manipulation of the wan-url argument, resulting in a stack-based buffer overflow. This type of vulnerability allows for potential remote exploitation, making it crucial for users to apply security measures. The details surrounding this exploit have been made publicly available, raising concerns for security within affected systems. Users of this product should remain vigilant and update their devices to ensure protection against possible attacks.

Affected Version(s)

A3002MU B20211125.1046

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-6194 - Proof of Concept