CVE-2026-93738

Name of the Vulnerable Software and Affected Versions Totolink A3002MU version Hh-B20211125.1046

Description A remote buffer overflow occurs when manipulating the webpage argument within the formSchedule() function of the /boafrm/formSchedule file. A buffer overflow is a condition where a process attempts to write more data to a fixed-length block of memory than it is designed to hold.

Recommendations As a temporary workaround, restrict access to the /boafrm/formSchedule endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.