Threat database

A vulnerability in libcurl allows a malicious FTP, IMAP, POP3, or SMTP server to bypass the configured transfer timeout mechanism by permanently omitting the final control-response line. This causes indefinite blocking of all concurrent transfers using the same multi-handle.

CVE-2026-92388 is a vulnerability in libcurl's FTP wildcard LIST operation handling. When such a LIST operation fails, libcurl fails to restore the write callback properly, leaving it set to an internal parser with corrupted state. Reusing or cloning the affected handle can cause immediate crashes, heap use-after-free reads, or type confusion leading to memory misinterpretation.

A vulnerability exists in curl when built with wolfSSL where curl can incorrectly validate a pinned public key hash against a key that the TLS peer does not actually possess. This occurs because curl re-parses the TLS certificate and is tricked by a manipulated validity length field to extract and match a different embedded key, leading to incorrect authorization of the pinned public key.

A vulnerability exists in curl when built with GnuTLS where a malicious WebSocket server can cause curl to send memory beyond its intended send buffer. This occurs due to an out-of-bounds read triggered when gnutls_record_send() returns a byte count greater than the number of bytes it was asked to send, typically after a blocked send.

A critical stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of the TOTOLINK X2000R device version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. This vulnerability can be triggered by an authenticated attacker sending a specially crafted HTTP request, potentially leading to arbitrary code execution.

An OS command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. This vulnerability allows an authenticated attacker to execute arbitrary code by sending a specially crafted HTTP request. The vulnerability has a high severity with a CVSS score of 9.1.

A critical stack-based buffer overflow vulnerability (CVE-2026-40615) exists in the boa formParentControl deviceName functionality of the TOTOLINK X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. This vulnerability can be triggered by an authenticated HTTP request with specially crafted data, potentially allowing arbitrary code execution.

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R firmware TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. These vulnerabilities can be triggered by an authenticated HTTP request targeting the static_dns1 parameter, potentially allowing arbitrary code execution. The CVSS score is 9.1, indicating critical severity.

A stack-based buffer overflow vulnerability exists in the boa formParentControl URL functionality of the TOTOLINK X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. An authenticated attacker can send a specially crafted HTTP request to trigger this vulnerability, potentially leading to arbitrary code execution with high impact on confidentiality, integrity, and availability.

An unsigned firmware vulnerability exists in the boa firmware update functionality of the TOTOLINK X2000R device, version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. This flaw allows an attacker with authenticated HTTP access to upload a specially crafted firmware binary, potentially leading to arbitrary firmware updates. The vulnerability has a high severity with a CVSS score of 9.1, indicating critical impact on confidentiality, integrity, and availability.

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of the TOTOLINK X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. These vulnerabilities can be triggered by an authenticated HTTP request using the dhcp_dns1 parameter, potentially allowing arbitrary code execution.

A critical stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of the TOTOLINK X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. An authenticated attacker can send a specially crafted HTTP request to trigger this vulnerability, potentially leading to arbitrary code execution with high impact on confidentiality, integrity, and availability.

A stack-based buffer overflow vulnerability exists in the Mcli functionality of TOTOLINK X2000R firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. This vulnerability can be triggered by an authenticated HTTP request, potentially allowing arbitrary code execution. The vulnerability has a critical severity with a CVSS score of 9.1.

An OS command injection vulnerability (CVE-2026-40627) exists in the boa formWsc targetAPSsid functionality of the Totolink X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. This flaw allows an authenticated attacker to execute arbitrary code by sending a specially crafted HTTP request. The vulnerability has a high severity with a CVSS score of 9.1, indicating critical impact on confidentiality, integrity, and availability.

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of the Totolink X2000R device. These vulnerabilities can be triggered by an authenticated HTTP request, specifically targeting the pppoe_dns2 parameter, potentially allowing arbitrary code execution. The affected firmware version is TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. The vulnerabilities have a high severity with a CVSS score of 9.1.

An OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of the TOTOLINK X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. An authenticated attacker can send a specially crafted HTTP request to execute arbitrary code on the device. This vulnerability has a high severity with a CVSS score of 9.1.

A vulnerability in libcurl's connection cache match function causes it to ignore the automatic client certificate option. This allows a cached, already authenticated Schannel connection to be reused for a redirected transfer to a different origin, even when the auto client certificate option is explicitly disabled for that transfer.

A critical stack-based buffer overflow vulnerability (CVE-2026-10132) exists in the boa formIpQos mac functionality of the TOTOLINK X2000R device firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. This vulnerability can be triggered by an authenticated HTTP request, potentially allowing arbitrary code execution.

A vulnerability in the PEAK-System PCAN driver parser causes the loop iterating over record lists to advance its processed-bytes counter even when a malformed record is detected and rejected. This flaw can lead to improper handling of records during parsing.

A heap-based buffer overflow vulnerability exists in the formUpload() functionality of the TOTOLINK X2000R device firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. An authenticated attacker can send a specially crafted HTTP request to trigger this vulnerability, potentially leading to arbitrary code execution.