Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-9817 | critical | 9.1 | No | A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-... | 2026-10-23 |
| CVE-2026-9814 | critical | 9.1 | No | An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B2... | 2026-10-23 |
| CVE-2026-9660 | critical | 9.1 | No | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X... | 2026-10-23 |
| CVE-2026-42026 | critical | 9.1 | No | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s)... | 2026-10-23 |
| CVE-2026-42025 | critical | 9.1 | No | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s)... | 2026-10-23 |
| CVE-2026-114263 | high | 7.3 | No | A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected element is the function mysqli_query of... | 2026-10-23 |
| CVE-2026-42024 | critical | 9.1 | No | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X... | 2026-10-23 |
| CVE-2026-42023 | critical | 9.1 | No | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X... | 2026-10-23 |
| CVE-2026-42022 | critical | 9.1 | No | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X... | 2026-10-23 |
| CVE-2026-42021 | critical | 9.1 | No | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X... | 2026-10-23 |
| CVE-2026-35499 | critical | 9.1 | No | An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250... | 2026-10-23 |
| CVE-2026-110814 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-23 |
| CVE-2026-114260 | medium | 6.5 | No | A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This vulnerability af... | 2026-10-23 |
| CVE-2026-114257 | high | 7.3 | No | A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected... | 2026-10-23 |
| CVE-2026-114254 | high | 7.3 | No | A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the func... | 2026-10-23 |
| CVE-2026-10141 | critical | 9.1 | No | A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421... | 2026-10-23 |
| CVE-2026-10139 | critical | 9.1 | No | A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327... | 2026-10-23 |
| CVE-2026-10138 | critical | 9.1 | No | A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421... | 2026-10-23 |
| CVE-2026-108793 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-23 |
| CVE-2026-108537 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-23 |