CWE-121: Stack-based Buffer Overflow vulnerabilities

CVE-2026-42020 is a critical stack-based buffer overflow vulnerability in the boa formIpv6Setup pppoe functionality of the Totolink X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. An authenticated attacker can trigger this flaw by sending a specially crafted HTTP request targeting the pppoe_dns2 parameter, potentially leading to arbitrary code execution.

CVE-2026-42019 is a critical stack-based buffer overflow vulnerability in the boa formIpv6Setup pppoe functionality of the Totolink X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. An authenticated attacker can exploit this flaw by sending a specially crafted HTTP request targeting the pppoe_dns1 parameter, potentially leading to arbitrary code execution.

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. These vulnerabilities can be triggered by an authenticated HTTP request targeting the static_gw parameter, potentially allowing arbitrary code execution.

CVE-2026-42023 is a critical stack-based buffer overflow vulnerability in the boa formIpv6Setup static network configuration functionality of the Totolink X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. An authenticated attacker can exploit this flaw by sending a specially crafted HTTP request targeting the static_ipv6 parameter, potentially leading to arbitrary code execution.

CVE-2026-42022 is a critical stack-based buffer overflow vulnerability in the boa formIpv6Setup static network configuration functionality of the Totolink X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. It can be triggered by an authenticated HTTP request manipulating the static_dns2 parameter, potentially allowing arbitrary code execution.

CVE-2026-42021 is a critical stack-based buffer overflow vulnerability in the boa formIpv6Setup static network configuration functionality of the Totolink X2000R device. It involves the static_dns1 parameter and can be triggered by an authenticated HTTP request. Successful exploitation may lead to arbitrary code execution with full impact on confidentiality, integrity, and availability.

CVE-2026-42026 is a critical stack-based buffer overflow vulnerability in the boa formIpv6Setup dhcp_dns functionality of the Totolink X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. It can be triggered by an authenticated HTTP request with a specially crafted dhcp_dns2 parameter, potentially allowing arbitrary code execution.

CVE-2026-42025 is a critical stack-based buffer overflow vulnerability in the boa formIpv6Setup dhcp_dns functionality of the Totolink X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. It can be triggered by an authenticated HTTP request manipulating the dhcp_dns1 parameter, potentially allowing arbitrary code execution.

CVE-2026-9660 is a critical stack-based buffer overflow vulnerability in the boa formFilter functionality of the TOTOLINK X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. It can be triggered by an authenticated HTTP request exploiting the vpnPassword parameter, potentially allowing arbitrary code execution with high impact on confidentiality, integrity, and availability.

CVE-2026-9659 is a critical stack-based buffer overflow vulnerability in the boa formFilter functionality of the TOTOLINK X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. It can be triggered by an authenticated HTTP request manipulating the vpnUser parameter, potentially allowing arbitrary code execution.

CVE-2026-9817 is a critical stack-based buffer overflow vulnerability in the boa formUploadFile functionality of the Totolink X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. An authenticated attacker can exploit this flaw by sending a specially crafted HTTP request, potentially leading to arbitrary code execution with high impact on confidentiality, integrity, and availability.

CVE-2026-9869 is a critical stack-based buffer overflow vulnerability in the boa formTR069Config functionality of the Totolink X2000R device (version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). An authenticated attacker can send a specially crafted HTTP request to trigger this vulnerability, potentially leading to arbitrary code execution with high impact on confidentiality, integrity, and availability.

CVE-2026-10132 is a critical stack-based buffer overflow vulnerability in the boa formIpQos mac functionality of the Totolink X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. An authenticated attacker can send a specially crafted HTTP request to trigger this flaw, potentially leading to arbitrary code execution with high impact on confidentiality, integrity, and availability.

CVE-2026-10133 is a critical stack-based buffer overflow vulnerability in the batchupg functionality of the Totolink X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. An authenticated attacker can send a specially crafted HTTP request to trigger this flaw, potentially leading to arbitrary code execution with high impact on confidentiality, integrity, and availability.

CVE-2026-10137 is a critical stack-based buffer overflow vulnerability in the boa formUpload() functionality of the Totolink X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. An authenticated attacker can send a specially crafted HTTP request to trigger this flaw, potentially leading to arbitrary code execution with high impact on confidentiality, integrity, and availability.

CVE-2026-10139 is a critical stack-based buffer overflow vulnerability in the Mcli functionality of the Totolink X2000R router firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. An authenticated attacker can send a specially crafted HTTP request to trigger this flaw, potentially leading to arbitrary code execution with high impact on confidentiality, integrity, and availability.

CVE-2026-17518 is a stack-based buffer overflow vulnerability in certain ASUS router models. It occurs due to a buffer copy operation without checking the size of the input, allowing an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length.

CVE-2026-105810 is a high-severity stack-based buffer overflow vulnerability in TP-Link Tapo C320WS version 2.0. It occurs in the local onboarding Wi-Fi configuration process when an authenticated attacker on the adjacent network submits a crafted request with an oversized encrypted password field. This allows overwriting of stack memory and execution of commands with root privileges, potentially leading to full control of the camera, modification of its behavior, access to sensitive configuration, and disruption of device availability. The issue is fixed in version 1.6.6 Build 260917 Rel.81089n.

CVE-2026-12665 is a high-severity stack-based buffer overflow vulnerability in IBM MQ Operator. It occurs when processing TLS certificates with malformed distinguished names during channel connection establishment, potentially allowing remote code execution. The vulnerability affects multiple versions of IBM MQ Operator prior to 3.4.0, where it has been fixed.

CVE-2026-108984 is a stack-based buffer overflow vulnerability in GeoVision Inc.'s GV-ASManager product, specifically affecting version 6.3.0. The flaw exists in the Web Server default connection ports managed by the process GeoWebServer.exe. It has a high severity rating with a CVSS score of 7.5 and can cause denial of service by impacting availability.