What is the CVSS score of CVE-2026-26732?

CVE-2026-26732 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of A3002ru Firmware are affected by CVE-2026-26732?

A critical remote code execution vulnerability affects TOTOLIK A3002RU V2.1.1 routers through VPN parameter handling, allowing unauthenticated attackers to execute arbitrary code.

Is there a public PoC exploit available for CVE-2026-26732?

Yes, a public proof-of-concept exploit is available for CVE-2026-26732. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-26732?

Within 24 hours: Identify all TOTOLINK A3002RU V2.1.1-B20211108.1455 devices in your network inventory and isolate affected units from critical systems. Within 7 days: Implement network segmentation to restrict VPN traffic to this device, disable VPN functionality if not operationally required, and deploy WAF rules blocking malformed vpnUser/vpnPassword requests. Within 30 days: Replace affected routers with patched firmware versions (monitor TOTOLINK support channels) or procure alternative vendor equipment with active security support.

A3002ru Firmware CVE-2026-26732

HIGH

Out-of-bounds Write (CWE-787)

2026-02-17 cve@mitre.org

Buffer Overflow Stack Overflow A3002ru Firmware

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

PoC Detected

Mar 11, 2026 - 16:16 vuln.today

Public exploit code

CVE Published

Feb 17, 2026 - 19:21 nvd

HIGH 8.8

DescriptionCVE.org

TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the vpnUser or vpnPassword` parameters in the formFilter function.

AnalysisAI

Stack overflow vulnerabilities in TOTOLIK A3002RU V2.1.1 router firmware allow authenticated attackers to achieve remote code execution through malformed vpnUser or vpnPassword parameters. Public exploit code exists for this vulnerability, and no patch is currently available, leaving affected devices at risk of complete compromise.

Technical ContextAI

Classified as CWE-787 (Out-of-bounds Write). Affects the formFilter component of A3002Ru Firmware. TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the vpnUser or vpnPassword` parameters in the formFilter function.

RemediationAI

Monitor vendor advisories for a patch. Enable ASLR, DEP/NX, and stack canaries where possible. Restrict network access to the affected service where possible.