Vulnerability · Published Apr 13, 2026 · Assigned by VulDB

CVE-2026-6194Totolink A3002MU HTTP Request formWlanSetup sub_410188 stack-based overflow

High 8.8

In plain English

A high-severity stack buffer overflow in A3002MU from Totolink. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.5%top 59.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A weakness has been identified in Totolink A3002MU B20211125.1046. Affected by this vulnerability is the function sub_410188 of the file /boafrm/formWlanSetup of the component HTTP Request Handler. This manipulation of the argument wan-url causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

Affected products (as reported)

Vendor	Product	Versions
Totolink	A3002MU	B20211125.1046

Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-357116 | Totolink A3002MU HTTP Request formWlanSetup sub_410188 stack-based overflow vdb-entry, technical-description
VDB-357116 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #797452 | TOTOLINK A3002MU A3002MU_Hh-B20211125.1046 Stack-based Buffer Overflow third-party-advisory
https://github.com/zhuchan770/vulnerability/blob/main/A3002MU/formWlanSetup/ToToLinkA3002MU%20formWlanSetup%20339996b67c9780caafb2d351dfd8a889.md exploit
https://www.totolink.net/ product