https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-8246.htmlhttps://patchthecve.com/cve/CVE-2025-8246.htmlWed, 17 Jun 2026 10:06:35 +0000HIGH 8.8: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formRoute of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attahttps://patchthecve.com/cve/CVE-2025-8245.htmlhttps://patchthecve.com/cve/CVE-2025-8245.htmlWed, 17 Jun 2026 10:06:35 +0000HIGH 8.8: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMultiAPVLAN of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer ovehttps://patchthecve.com/cve/CVE-2025-8244.htmlhttps://patchthecve.com/cve/CVE-2025-8244.htmlWed, 17 Jun 2026 10:06:35 +0000HIGH 8.8: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formMapDelDevice of the component HTTP POST Request Handler. The manipulation of the argument macstr leads to buffer overflow. It is possible to lauhttps://patchthecve.com/cve/CVE-2025-8243.htmlhttps://patchthecve.com/cve/CVE-2025-8243.htmlWed, 17 Jun 2026 10:06:35 +0000HIGH 8.8: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formMapDel of the component HTTP POST Request Handler. The manipulation of the argument devicemac1 leads to buffer overflow. The attack may be inihttps://patchthecve.com/cve/CVE-2025-8242.htmlhttps://patchthecve.com/cve/CVE-2025-8242.htmlWed, 17 Jun 2026 10:06:35 +0000HIGH 8.8: A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument ip6addr/url/vpnPassword/vpnUser leads to buffer overflowhttps://patchthecve.com/cve/CVE-2025-6824.htmlhttps://patchthecve.com/cve/CVE-2025-6824.htmlWed, 17 Jun 2026 10:02:38 +0000HIGH 8.8: A vulnerability classified as critical has been found in TOTOLINK X15 up to 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to https://patchthecve.com/cve/CVE-2025-6402.htmlhttps://patchthecve.com/cve/CVE-2025-6402.htmlWed, 17 Jun 2026 10:01:48 +0000HIGH 8.8: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formIpv6Setup of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack canhttps://patchthecve.com/cve/CVE-2025-6399.htmlhttps://patchthecve.com/cve/CVE-2025-6399.htmlWed, 17 Jun 2026 10:01:48 +0000HIGH 8.8: A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formIPv6Addr of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launhttps://patchthecve.com/cve/CVE-2025-6165.htmlhttps://patchthecve.com/cve/CVE-2025-6165.htmlWed, 17 Jun 2026 10:01:18 +0000HIGH 8.8: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formTmultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can https://patchthecve.com/cve/CVE-2025-6150.htmlhttps://patchthecve.com/cve/CVE-2025-6150.htmlWed, 17 Jun 2026 10:01:16 +0000HIGH 8.8: A vulnerability classified as critical was found in TOTOLINK X15 1.0.0-B20230714.1105. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attahttps://patchthecve.com/cve/CVE-2025-6146.htmlhttps://patchthecve.com/cve/CVE-2025-6146.htmlWed, 17 Jun 2026 10:01:15 +0000HIGH 8.8: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. This affects an unknown part of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiatehttps://patchthecve.com/cve/CVE-2025-5790.htmlhttps://patchthecve.com/cve/CVE-2025-5790.htmlWed, 17 Jun 2026 09:48:45 +0000HIGH 8.8: A vulnerability classified as critical was found in TOTOLINK X15 1.0.0-B20230714.1105. This vulnerability affects unknown code of the file /boafrm/formIpQoS of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow. The attack can be initiated remotelyhttps://patchthecve.com/cve/CVE-2025-5789.htmlhttps://patchthecve.com/cve/CVE-2025-5789.htmlWed, 17 Jun 2026 09:48:45 +0000HIGH 8.8: A vulnerability classified as critical has been found in TOTOLINK X15 1.0.0-B20230714.1105. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument service_type leads to buffer overflow. It is possible to initiate the ahttps://patchthecve.com/cve/CVE-2025-5788.htmlhttps://patchthecve.com/cve/CVE-2025-5788.htmlWed, 17 Jun 2026 09:48:45 +0000HIGH 8.8: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formReflashClientTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflohttps://patchthecve.com/cve/CVE-2025-5787.htmlhttps://patchthecve.com/cve/CVE-2025-5787.htmlWed, 17 Jun 2026 09:48:45 +0000HIGH 8.8: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWsc of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. Thttps://patchthecve.com/cve/CVE-2025-5786.htmlhttps://patchthecve.com/cve/CVE-2025-5786.htmlWed, 17 Jun 2026 09:48:44 +0000HIGH 8.8: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formDMZ of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch thttps://patchthecve.com/cve/CVE-2025-5785.htmlhttps://patchthecve.com/cve/CVE-2025-5785.htmlWed, 17 Jun 2026 09:48:44 +0000HIGH 8.8: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formWirelessTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may bhttps://patchthecve.com/cve/CVE-2025-5739.htmlhttps://patchthecve.com/cve/CVE-2025-5739.htmlWed, 17 Jun 2026 09:48:40 +0000HIGH 8.8: A vulnerability classified as critical has been found in TOTOLINK X15 1.0.0-B20230714.1105. This affects an unknown part of the file /boafrm/formSaveConfig of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate thehttps://patchthecve.com/cve/CVE-2025-5738.htmlhttps://patchthecve.com/cve/CVE-2025-5738.htmlWed, 17 Jun 2026 09:48:39 +0000HIGH 8.8: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formStats of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attahttps://patchthecve.com/cve/CVE-2025-5737.htmlhttps://patchthecve.com/cve/CVE-2025-5737.htmlWed, 17 Jun 2026 09:48:39 +0000HIGH 8.8: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formDosCfg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflowhttps://patchthecve.com/cve/CVE-2025-5736.htmlhttps://patchthecve.com/cve/CVE-2025-5736.htmlWed, 17 Jun 2026 09:48:39 +0000HIGH 8.8: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch thttps://patchthecve.com/cve/CVE-2025-5735.htmlhttps://patchthecve.com/cve/CVE-2025-5735.htmlWed, 17 Jun 2026 09:48:39 +0000HIGH 8.8: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formSetLg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be inithttps://patchthecve.com/cve/CVE-2025-5734.htmlhttps://patchthecve.com/cve/CVE-2025-5734.htmlWed, 17 Jun 2026 09:48:39 +0000HIGH 8.8: A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer overflow. The attack https://patchthecve.com/cve/CVE-2025-5503.htmlhttps://patchthecve.com/cve/CVE-2025-5503.htmlWed, 17 Jun 2026 09:48:02 +0000HIGH 8.8: A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. This affects the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the argument deviceMacAddr leads to stack-based buffer overflow. It is possible to initiate the attack remhttps://patchthecve.com/cve/CVE-2025-5502.htmlhttps://patchthecve.com/cve/CVE-2025-5502.htmlWed, 17 Jun 2026 09:48:02 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in TOTOLINK X15 1.0.0-B20230714.1105. Affected by this issue is the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the argument deviceMacAddr leads to command injection. The attack may be launched remote