CVE-2026-15271 | TOTOLINK EX200 up to 20260906 Web Interface /etc/boa/boa.conf least privilege violation

A vulnerability marked as critical has been reported in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 up to 20260906. Affected by this issue is some unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. The manipulation leads to least privilege violation.

This vulnerability is listed as CVE-2026-15271. The attack may be initiated remotely. There is no available exploit.