CVE-2026-90605

Name of the Vulnerable Software and Affected Versions Totolink A3002MU version Hh-B20211125.1046

Description A buffer overflow can be triggered remotely within the boa component. The issue exists in the formFilter() function located in the /boafrm/formFilter file, where manipulating the ip6addr argument allows for the overflow to occur.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the formFilter() function to minimize the risk of exploitation.