CVE-2026-6194: Totolink A3002MU HTTP Request formWlanSetup sub_410188 stack-based overflow
A weakness has been identified in Totolink A3002MU B20211125.1046. Affected by this vulnerability is the function sub410188 of the file /boafrm/formWlanSetup of the component HTTP Request Handler. This manipulation of the argument wan-url causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6194?
CVE-2026-6194 is classified as a critical vulnerability due to its potential for remote exploitation leading to a stack-based overflow.
How do I fix CVE-2026-6194?
To mitigate CVE-2026-6194, it is recommended to update the Totolink A3002MU firmware to a version that addresses this vulnerability.
What component is affected by CVE-2026-6194?
The affected component in CVE-2026-6194 is the HTTP Request Handler, specifically the function sub_410188 in the formWlanSetup file.
What type of vulnerability is CVE-2026-6194?
CVE-2026-6194 is a stack-based buffer overflow vulnerability that allows attackers to manipulate the affected system.
Which version of Totolink A3002MU is impacted by CVE-2026-6194?
CVE-2026-6194 impacts the Totolink A3002MU specifically in version B20211125.1046.