CVE-2026-93740

Summary

The vulnerability in Totolink A3002MU Hh-B20211125.1046 allows for remote buffer overflow via manipulation of the submit-url argument, leading to potential remote code execution.

Exploitability

Exploitation is relatively straightforward given the publicly available exploit, and requires only the ability to manipulate the submit-url argument.

Blast radius

If exploited, this vulnerability could lead to complete control of the affected device, potentially allowing attackers to execute arbitrary code and gain full access to the network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the fixed version 20211125.1046 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.