Stack-based Buffer Overflow Vulnerabilities in TOTOLINK X2000R Router

CVE-2026-9660

What is CVE-2026-9660?

The TOTOLINK X2000R router contains multiple stack-based buffer overflow vulnerabilities in the boa formFilter functionality. An attacker can exploit these vulnerabilities through specially crafted HTTP requests targeting the vpnPassword parameter. Successful exploitation may allow an attacker to execute arbitrary code with the privileges of the affected service, potentially leading to unauthorized access and control of the router.

References