CVE-2026-9659

Summary

Stack-based buffer overflow in the vpnUser parameter of X2000R's formFilter functionality allows authenticated remote attackers to execute arbitrary code via crafted HTTP requests.

Exploitability

Exploitation requires valid authentication and a specially crafted HTTP request targeting the vulnerable formFilter endpoint; no public exploit exists yet, but the high CVSS score indicates low technical barriers for an attacker with credentials.

Blast radius

Successful exploitation could lead to full system compromise including confidentiality, integrity, and availability impacts on the affected device.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 or later, as this is the only version explicitly referenced in the description that may contain a fix.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.