CVE-2026-42025

Summary

Stack-based buffer overflow in the formIpv6Setup dhcp_dns functionality of X2000R router allows authenticated remote attackers to execute arbitrary code via a specially crafted HTTP request containing a long dhcp_dns1 parameter.

Exploitability

Exploitation requires valid authenticated access to the device's web interface; no public exploit exists, but the vulnerability is straightforward to trigger with a single malformed HTTP POST request.

Blast radius

Successful exploitation grants full control of the router, enabling pivot to internal networks, DNS hijacking, and potential disruption of all connected devices.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 or later, as this is the only fixed version explicitly referenced in the description.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.