CVEs published by Talos

CVEs published by Talos (CVE Numbering Authority). 21 tracked.

• CVE-2026-9869 CRITICAL 9.1 A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version
• CVE-2026-9827 CRITICAL 9.1 A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOT
• CVE-2026-9817 CRITICAL 9.1 A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(
• CVE-2026-9814 CRITICAL 9.1 An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s)
• CVE-2026-9660 CRITICAL 9.1 Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of
• CVE-2026-42026 CRITICAL 9.1 Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns funct
• CVE-2026-42025 CRITICAL 9.1 Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns funct
• CVE-2026-42024 CRITICAL 9.1 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configurati
• CVE-2026-42023 CRITICAL 9.1 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configurati
• CVE-2026-42022 CRITICAL 9.1 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configurati
• CVE-2026-42021 CRITICAL 9.1 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configurati
• CVE-2026-35499 CRITICAL 9.1 An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TO
• CVE-2026-10141 CRITICAL 9.1 A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOL
• CVE-2026-10139 CRITICAL 9.1 A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X
• CVE-2026-10138 CRITICAL 9.1 A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOL
• CVE-2026-10137 CRITICAL 9.1 A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s)
• CVE-2026-10136 CRITICAL 9.1 A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s):
• CVE-2026-10135 CRITICAL 9.1 A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X200
• CVE-2026-10133 CRITICAL 9.1 A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLI
• CVE-2026-10132 CRITICAL 9.1 A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s
• CVE-2026-10131 CRITICAL 9.1 An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s):

← Back to latest CVEs