CVE-2026-8137 | Totolink X5000R 9.1.0u.6369_B20230113 /boafrm/formDdns sub_458E40 submit-url buffer overflow

A vulnerability marked as critical has been reported in Totolink X5000R 9.1.0u.6369_B20230113. This vulnerability affects the function sub_458E40 of the file /boafrm/formDdns. The manipulation of the argument submit-url leads to buffer overflow.

This vulnerability is referenced as CVE-2026-8137. Remote exploitation of the attack is possible. Furthermore, an exploit is available.