CVE-2026-93741

Name of the Vulnerable Software and Affected Versions Totolink A3002MU version Hh-B20211125.1046

Description A buffer overflow occurs in the formWlWds() function within the /boafrm/formWlWds file. This issue is triggered by the manipulation of the submit-url argument, allowing a remote attacker to launch an attack.

Recommendations Update Totolink A3002MU version Hh-B20211125.1046 to a patched version. As a temporary workaround, restrict access to the /boafrm/formWlWds endpoint to minimize the risk of exploitation.