CVE-2026-9869

Summary

A stack-based buffer overflow in the boa formTR069Config function of the X2000R router allows authenticated attackers to execute arbitrary code by sending a specially crafted HTTP request that overflows a local buffer on the stack.

Exploitability

Exploitation requires valid authentication and a single HTTP request; no complex conditions or user interaction are needed, making it straightforward for an authenticated attacker.

Blast radius

Successful exploitation grants full system compromise (confidentiality, integrity, and availability) on the vulnerable device, potentially enabling pivot to internal networks or persistent access.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 or later, as this is the only fixed version explicitly named in the description.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.