CVE-2026-93740

CRITICALCVSS 10.0๐Ÿงจ Public exploit (GreyNoise)

A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

Published 2026-09-18 ยท last modified 2026-09-18

Full record at NVD โ†—

โ† Get alerted the moment a CVE hits your gear โ€” subscribe free

Ncerio by BeyondNets ยท data from NVD, CISA KEV, EPSS.