
TOTOLINK X2000R Users Urged to Patch CVSS 9.1 Heap Overflow Vulnerability CVE-2026-10136 Before Exploitation
A critical heap overflow in the TOTOLINK X2000R router allows authenticated attackers to run arbitrary code. No patch is confirmed yet.
Everything Patch Review has reported about TOTOLINK: 6 stories, newest first. Part of our Vulnerabilities coverage.

A critical heap overflow in the TOTOLINK X2000R router allows authenticated attackers to run arbitrary code. No patch is confirmed yet.

A critical stack buffer overflow in specific TOTOLINK firmware allows authenticated attackers to execute arbitrary code via crafted HTTP requests.

A critical buffer overflow in the TOTOLINK X2000R router allows authenticated attackers to run arbitrary code via a crafted HTTP request.

A critical vulnerability in the Totolink X2000R router allows remote code execution via a crafted HTTP request, requiring immediate attention for affected users.

A critical buffer overflow in specific Totolink X2000R firmware allows authenticated attackers to run arbitrary code via crafted HTTP requests.

A critical stack-based buffer overflow in specific Totolink X2000R firmware allows authenticated attackers to run arbitrary code via crafted HTTP requests.