VulnerabilitiesCVE-2026-28763: Authenticated HTTP Attack Enables RCE on Specific Totolink X2000R FirmwareA stack-based buffer overflow in the X2000R firmware allows arbitrary code execution via an authenticated HTTP request, posing a severe risk to device integrity.Oct 20, 2026
VulnerabilitiesTotolink X2000R Firmware Flaw CVSS 9.1 Lets Authenticated Users Run Arbitrary CodeTotolink X2000R routers running specific firmware face a critical stack overflow risk that allows authenticated attackers to execute arbitrary code.Oct 20, 2026
VulnerabilitiesCVE-2026-35499: Totolink X2000R Router CVSS 9.1 Flaw Allows Remote Code ExecutionA CVSS 9.1 flaw in the Totolink X2000R router allows authenticated attackers to execute arbitrary code via crafted HTTP requests.Oct 20, 2026