CVE-2026-93740
CRITICAL
NVD
CVSS Score
10
Severity
CRITICAL
Published
Sep 18, 2026
Vendor
unknown
Description
A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.