{"schema_version":1,"title":"TOTOLINK X2000r vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 31 vulnerabilities in TOTOLINK X2000r: 0 in the last 7 days and 30 in the last 90 days, 30 of them critical and 0 exploited in the wild. The most recent, CVE-2026-9869, was published on 20 October 2026. 30 vulnerabilities in the last four weeks, up from none in the four before. 30 critical against 0.","url":"https://junglewise.ai/threats/technologies/x2000r","json_url":"https://junglewise.ai/threats/technologies/x2000r.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/x2000r","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":0,"all_time":31,"critical":30,"exploited":0,"last_7_days":0,"last_30_days":30,"last_90_days":30,"last_365_days":30},"latest":[{"cve":"CVE-2026-9869","cvss":9.1,"slug":"cve-2026-9869-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa","title":"TOTOLINK X2000R stack-based buffer overflow in formTR069Config","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:23.143+00:00","url":"https://junglewise.ai/threats/cve-2026-9869-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa"},{"cve":"CVE-2026-9827","cvss":9.1,"slug":"cve-2026-9827-a-arbitrary-file-write-vulnerability-exists-in-the-boa","title":"Totolink X2000R arbitrary file write in boa formUploadFile","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:23.02+00:00","url":"https://junglewise.ai/threats/cve-2026-9827-a-arbitrary-file-write-vulnerability-exists-in-the-boa"},{"cve":"CVE-2026-9817","cvss":9.1,"slug":"cve-2026-9817-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa","title":"Totolink X2000R stack-based buffer overflow in boa formUploadFile","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:22.9+00:00","url":"https://junglewise.ai/threats/cve-2026-9817-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa"},{"cve":"CVE-2026-9814","cvss":9.1,"slug":"cve-2026-9814-an-os-command-injection-vulnerability-exists-in-the-boa-formwizard","title":"Totolink X2000R OS command injection in formWizard","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:22.773+00:00","url":"https://junglewise.ai/threats/cve-2026-9814-an-os-command-injection-vulnerability-exists-in-the-boa-formwizard"},{"cve":"CVE-2026-9660","cvss":9.1,"slug":"cve-2026-9660-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities","title":"TOTOLINK X2000R stack-based buffer overflow in boa formFilter","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:22.613+00:00","url":"https://junglewise.ai/threats/cve-2026-9660-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities"},{"cve":"CVE-2026-9659","cvss":9.1,"slug":"cve-2026-9659-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities","title":"TOTOLINK X2000R stack-based buffer overflow in boa formFilter","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:22.41+00:00","url":"https://junglewise.ai/threats/cve-2026-9659-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities"},{"cve":"CVE-2026-42026","cvss":9.1,"slug":"cve-2026-42026-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities","title":"Totolink X2000R stack-based buffer overflow in IPv6 DHCP DNS","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:19.73+00:00","url":"https://junglewise.ai/threats/cve-2026-42026-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities"},{"cve":"CVE-2026-42025","cvss":9.1,"slug":"cve-2026-42025-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities","title":"Totolink X2000R stack-based buffer overflow in formIpv6Setup","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:19.61+00:00","url":"https://junglewise.ai/threats/cve-2026-42025-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities"},{"cve":"CVE-2026-42024","cvss":9.1,"slug":"cve-2026-42024-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the","title":"Totolink X2000R stack-based buffer overflow in formIpv6Setup","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:19.49+00:00","url":"https://junglewise.ai/threats/cve-2026-42024-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the"},{"cve":"CVE-2026-42023","cvss":9.1,"slug":"cve-2026-42023-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the","title":"Totolink X2000R stack buffer overflow in formIpv6Setup","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:19.373+00:00","url":"https://junglewise.ai/threats/cve-2026-42023-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the"},{"cve":"CVE-2026-42022","cvss":9.1,"slug":"cve-2026-42022-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the","title":"Totolink X2000R stack-based buffer overflow in formIpv6Setup","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:19.257+00:00","url":"https://junglewise.ai/threats/cve-2026-42022-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the"},{"cve":"CVE-2026-42021","cvss":9.1,"slug":"cve-2026-42021-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the","title":"Totolink X2000R stack-based buffer overflow in network configuration","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:19.14+00:00","url":"https://junglewise.ai/threats/cve-2026-42021-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the"},{"cve":"CVE-2026-42020","cvss":9.1,"slug":"cve-2026-42020-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the","title":"Totolink X2000R stack-based buffer overflow in formIpv6Setup pppoe","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:19.02+00:00","url":"https://junglewise.ai/threats/cve-2026-42020-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the"},{"cve":"CVE-2026-42019","cvss":9.1,"slug":"cve-2026-42019-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the","title":"Totolink X2000R stack-based buffer overflow in pppoe","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:18.903+00:00","url":"https://junglewise.ai/threats/cve-2026-42019-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the"},{"cve":"CVE-2026-41223","cvss":9.1,"slug":"cve-2026-41223-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa","title":"Totolink X2000R stack-based buffer overflow in formMapDelDevice","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:18.783+00:00","url":"https://junglewise.ai/threats/cve-2026-41223-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa"},{"cve":"CVE-2026-41222","cvss":9.1,"slug":"cve-2026-41222-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa","title":"TOTOLINK X2000R stack-based buffer overflow in boa formParentControl","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:18.653+00:00","url":"https://junglewise.ai/threats/cve-2026-41222-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa"},{"cve":"CVE-2026-40627","cvss":9.1,"slug":"cve-2026-40627-an-os-command-injection-vulnerability-exists-in-the-boa-formwsc","title":"Totolink X2000R OS command injection in formWsc","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:18.517+00:00","url":"https://junglewise.ai/threats/cve-2026-40627-an-os-command-injection-vulnerability-exists-in-the-boa-formwsc"},{"cve":"CVE-2026-40615","cvss":9.1,"slug":"cve-2026-40615-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa","title":"Totolink X2000R stack-based buffer overflow in boa formParentControl","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:18.393+00:00","url":"https://junglewise.ai/threats/cve-2026-40615-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa"},{"cve":"CVE-2026-35499","cvss":9.1,"slug":"cve-2026-35499-an-os-command-injection-vulnerability-exists-in-the-boa-formwsc","title":"Totolink X2000R OS command injection in formWsc","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:18.277+00:00","url":"https://junglewise.ai/threats/cve-2026-35499-an-os-command-injection-vulnerability-exists-in-the-boa-formwsc"},{"cve":"CVE-2026-33568","cvss":9.1,"slug":"cve-2026-33568-a-os-command-injection-vulnerability-exists-in-the-boa","title":"TOTOLINK X2000R OS command injection in formMapDelDevice","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:18.157+00:00","url":"https://junglewise.ai/threats/cve-2026-33568-a-os-command-injection-vulnerability-exists-in-the-boa"},{"cve":"CVE-2026-28763","cvss":9.1,"slug":"cve-2026-28763-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa","title":"TOTOLINK X2000R stack-based buffer overflow in boa formMapDelDevice","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:18.037+00:00","url":"https://junglewise.ai/threats/cve-2026-28763-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa"},{"cve":"CVE-2026-10141","cvss":9.1,"slug":"cve-2026-10141-a-unsigned-firmware-vulnerability-exists-in-the-boa-firmware","title":"TOTOLINK X2000R unsigned firmware in boa web interface","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:16.843+00:00","url":"https://junglewise.ai/threats/cve-2026-10141-a-unsigned-firmware-vulnerability-exists-in-the-boa-firmware"},{"cve":"CVE-2026-10139","cvss":9.1,"slug":"cve-2026-10139-a-stack-based-buffer-overflow-vulnerability-exists-in-the-mcli","title":"Totolink X2000R stack-based buffer overflow in Mcli","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:16.72+00:00","url":"https://junglewise.ai/threats/cve-2026-10139-a-stack-based-buffer-overflow-vulnerability-exists-in-the-mcli"},{"cve":"CVE-2026-10138","cvss":9.1,"slug":"cve-2026-10138-a-os-command-injection-vulnerability-exists-in-the-boa-formupload","title":"TOTOLINK X2000R OS command injection in boa formUpload()","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:16.597+00:00","url":"https://junglewise.ai/threats/cve-2026-10138-a-os-command-injection-vulnerability-exists-in-the-boa-formupload"},{"cve":"CVE-2026-10137","cvss":9.1,"slug":"cve-2026-10137-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa","title":"Totolink X2000R stack-based buffer overflow in boa formUpload","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:16.48+00:00","url":"https://junglewise.ai/threats/cve-2026-10137-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":30,"exploited":0,"vulnerabilities":30},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"TOTOLINK A3300R","slug":"a3300r","vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/a3300r"},{"name":"TOTOLINK A3300r Firmware","slug":"a3300r-firmware","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/a3300r-firmware"},{"name":"TOTOLINK A8000RU","slug":"a8000ru","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/a8000ru"},{"name":"TOTOLINK A950RG","slug":"a950rg","vulnerabilities":14,"url":"https://junglewise.ai/threats/technologies/a950rg"},{"name":"TOTOLINK A3002MU","slug":"a3002mu","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/a3002mu"},{"name":"TOTOLINK CA300-PoE","slug":"ca300-poe","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/ca300-poe"},{"name":"TOTOLINK CA750-PoE","slug":"ca750-poe","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/ca750-poe"},{"name":"TOTOLINK A7100RU","slug":"a7100ru","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/a7100ru"},{"name":"TOTOLINK NR1800X","slug":"nr1800x","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/nr1800x"},{"name":"TOTOLINK X5000R","slug":"x5000r","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/x5000r"},{"name":"TOTOLINK A720R","slug":"a720r","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/a720r"},{"name":"TOTOLINK A720R firmware","slug":"a720r-firmware","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/a720r-firmware"}],"technology":{"hub":true,"name":"TOTOLINK X2000r","slug":"x2000r","vendor":{"hub":true,"name":"TOTOLINK","slug":"totolink","url":"https://junglewise.ai/threats/vendors/totolink"},"aliases":[],"category":"appliance","homepage":"https://www.totolink.net/home/menu/detail/menu_listpk/36/id/215.html","repo_url":"https://www.totolink.net/home/menu/detail/menu_list/products/id/225.html","description":"A wireless router manufactured by TOTOLINK.","url":"https://junglewise.ai/threats/technologies/x2000r"},"most_severe":[{"cve":"CVE-2026-9869","cvss":9.1,"slug":"cve-2026-9869-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa","title":"TOTOLINK X2000R stack-based buffer overflow in formTR069Config","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:23.143+00:00","url":"https://junglewise.ai/threats/cve-2026-9869-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa"},{"cve":"CVE-2026-9827","cvss":9.1,"slug":"cve-2026-9827-a-arbitrary-file-write-vulnerability-exists-in-the-boa","title":"Totolink X2000R arbitrary file write in boa formUploadFile","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:23.02+00:00","url":"https://junglewise.ai/threats/cve-2026-9827-a-arbitrary-file-write-vulnerability-exists-in-the-boa"},{"cve":"CVE-2026-9817","cvss":9.1,"slug":"cve-2026-9817-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa","title":"Totolink X2000R stack-based buffer overflow in boa formUploadFile","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:22.9+00:00","url":"https://junglewise.ai/threats/cve-2026-9817-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa"},{"cve":"CVE-2026-9814","cvss":9.1,"slug":"cve-2026-9814-an-os-command-injection-vulnerability-exists-in-the-boa-formwizard","title":"Totolink X2000R OS command injection in formWizard","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:22.773+00:00","url":"https://junglewise.ai/threats/cve-2026-9814-an-os-command-injection-vulnerability-exists-in-the-boa-formwizard"},{"cve":"CVE-2026-9660","cvss":9.1,"slug":"cve-2026-9660-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities","title":"TOTOLINK X2000R stack-based buffer overflow in boa formFilter","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:22.613+00:00","url":"https://junglewise.ai/threats/cve-2026-9660-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities"},{"cve":"CVE-2026-9659","cvss":9.1,"slug":"cve-2026-9659-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities","title":"TOTOLINK X2000R stack-based buffer overflow in boa formFilter","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:22.41+00:00","url":"https://junglewise.ai/threats/cve-2026-9659-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities"},{"cve":"CVE-2026-42026","cvss":9.1,"slug":"cve-2026-42026-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities","title":"Totolink X2000R stack-based buffer overflow in IPv6 DHCP DNS","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:19.73+00:00","url":"https://junglewise.ai/threats/cve-2026-42026-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities"},{"cve":"CVE-2026-42025","cvss":9.1,"slug":"cve-2026-42025-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities","title":"Totolink X2000R stack-based buffer overflow in formIpv6Setup","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:19.61+00:00","url":"https://junglewise.ai/threats/cve-2026-42025-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities"},{"cve":"CVE-2026-42024","cvss":9.1,"slug":"cve-2026-42024-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the","title":"Totolink X2000R stack-based buffer overflow in formIpv6Setup","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:19.49+00:00","url":"https://junglewise.ai/threats/cve-2026-42024-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the"},{"cve":"CVE-2026-42023","cvss":9.1,"slug":"cve-2026-42023-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the","title":"Totolink X2000R stack buffer overflow in formIpv6Setup","severity":"critical","exploited":false,"published_at":"2026-10-20T21:17:19.373+00:00","url":"https://junglewise.ai/threats/cve-2026-42023-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the"}],"generated_at":"2026-11-12T03:07:00.164048+00:00"}