Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
400,982 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-40615 | 9.1 Critical | A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code… | Oct 20, 2026 |
| CVE-2026-42020 | 9.1 Critical | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An… | Oct 20, 2026 |
| CVE-2026-42019 | 9.1 Critical | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An… | Oct 20, 2026 |
| CVE-2026-42024 | 9.1 Critical | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to… | Oct 20, 2026 |
| CVE-2026-42023 | 9.1 Critical | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to… | Oct 20, 2026 |
| CVE-2026-42022 | 9.1 Critical | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to… | Oct 20, 2026 |
| CVE-2026-42021 | 9.1 Critical | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to… | Oct 20, 2026 |
| CVE-2026-42026 | 9.1 Critical | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary… | Oct 20, 2026 |
| CVE-2026-42025 | 9.1 Critical | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary… | Oct 20, 2026 |
| CVE-2026-9660 | 9.1 Critical | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code… | Oct 20, 2026 |
| CVE-2026-9659 | 9.1 Critical | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code… | Oct 20, 2026 |
| CVE-2026-9814 | 9.1 Critical | An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker… | Oct 20, 2026 |
| CVE-2026-9817 | 9.1 Critical | A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker… | Oct 20, 2026 |
| CVE-2026-9827 | 9.1 Critical | A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can… | Oct 20, 2026 |
| CVE-2026-9869 | 9.1 Critical | A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An… | Oct 20, 2026 |
| CVE-2026-10131 | 9.1 Critical | An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker… | Oct 20, 2026 |
| CVE-2026-10132 | 9.1 Critical | A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker… | Oct 20, 2026 |
| CVE-2026-10133 | 9.1 Critical | A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make… | Oct 20, 2026 |
| CVE-2026-10135 | 9.1 Critical | A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an… | Oct 20, 2026 |
| CVE-2026-10136 | 9.1 Critical | A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker… | Oct 20, 2026 |
| CVE-2026-10137 | 9.1 Critical | A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker… | Oct 20, 2026 |
| CVE-2026-10138 | 9.1 Critical | A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make… | Oct 20, 2026 |
| CVE-2026-10139 | 9.1 Critical | A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an… | Oct 20, 2026 |
| CVE-2026-10141 | 9.1 Critical | A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted firmware binary can lead to arbitrary firmware update. An attacker can… | Oct 20, 2026 |
| CVE-2026-92391 | 7.5 High | curl_mime_free stack overflow by recursion | Oct 20, 2026 |
| CVE-2026-103672 | 6.9 Medium | HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array Index | Oct 20, 2026 |
| CVE-2026-92390 | 7.5 High | -J no-clobber guarantee bypassed with 103 early hints | Oct 20, 2026 |
| CVE-2026-92389 | 8.1 High | TFTP direction confusion | Oct 20, 2026 |
| CVE-2026-92388 | 9.1 Critical | FTP wildcard write callback mixup | Oct 20, 2026 |
| CVE-2026-92387 | 8.1 High | never-ending loop via server response omission | Oct 20, 2026 |
| CVE-2026-101103 | 6.8 Medium | HMS Networks PEAK-System PCAN Windows drivers Classic Buffer Overflow | Oct 20, 2026 |
| CVE-2026-92386 | 8.1 High | server-set cookie aborts cookie jar load | Oct 20, 2026 |
| CVE-2026-87866 | 9.1 Critical | wolfSSL public-key pinning bypass | Oct 20, 2026 |
| CVE-2026-109576 | 6.8 Medium | HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write | Oct 20, 2026 |
| CVE-2026-87865 | 7.4 High | knownhost callback mismatches key as missing | Oct 20, 2026 |
| CVE-2026-87863 | 8.1 High | HSTS response erases persisted entries | Oct 20, 2026 |
| CVE-2026-87864 | 8.1 High | IMAP APPEND plus CRLF conversion command injection | Oct 20, 2026 |
| CVE-2026-87862 | 8.1 High | HSTS cache import drops longer-lived child | Oct 20, 2026 |
| CVE-2026-87861 | 9.1 Critical | cross-origin reuse of a Negotiate connection | Oct 20, 2026 |
| CVE-2026-86415 | 7.5 High | auto client cert connection reuse mixup | Oct 20, 2026 |
| CVE-2026-86414 | 9.1 Critical | leaking host credentials to HTTP proxy | Oct 20, 2026 |
| CVE-2026-86413 | 9.1 Critical | Negotiate credentials sent to redirected origin | Oct 20, 2026 |
| CVE-2026-112380 | 9.0 Critical | Missing authorization in the WhatsApp channel in Kiro Crew | Oct 20, 2026 |
| CVE-2026-86412 | 8.1 High | server-set cookie erases cookie jar | Oct 20, 2026 |
| CVE-2026-86411 | 9.1 Critical | FTP connection reuse inherits client-certificate | Oct 20, 2026 |
| CVE-2026-86410 | 8.1 High | redirect to SFTP or SCP bypasses host verification | Oct 20, 2026 |
| CVE-2026-86409 | 8.1 High | stale SigV4 headers sent unintended | Oct 20, 2026 |
| CVE-2026-113725 | 7.8 High | virtualenv bash activate runs commands from an environment name with a backslash before $ | Oct 20, 2026 |
| CVE-2026-113724 | 4.5 Medium | virtualenv: Deletion recovery can change a symlink target's mode | Oct 20, 2026 |
| CVE-2026-113723 | 7.1 High | virtualenv: Bash prompt values can change meaning under older compatibility modes | Oct 20, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.