CVE-2026-93739

CRITICALCVSS 9.9๐Ÿงจ Public exploit (GreyNoise)

A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /boafrm/formWlAc. Executing a manipulation of the argument submit-url can lead to buffer overflow. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Published 2026-09-18 ยท last modified 2026-09-18

Full record at NVD โ†—

โ† Get alerted the moment a CVE hits your gear โ€” subscribe free

Ncerio by BeyondNets ยท data from NVD, CISA KEV, EPSS.