Everything Patch Gazette has reported about firmware: 3 stories, newest first. Part of our Vulnerabilities coverage.
A stack-based buffer overflow in the X2000R firmware allows arbitrary code execution via an authenticated HTTP request, posing a severe risk to device integrity.
A CVSS 9.1 flaw in the Totolink X2000R router allows authenticated attackers to execute arbitrary code via crafted HTTP requests.
A critical flaw in SWUpdate versions through 2026.05.1 permits attackers using sibling intermediate certificates to install unauthorized firmware updates.