CVE-2026-26736Disclosure(totolink / a3002ru-v3)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

TOTOLINK A3002RU_V3 V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the static_ipv6 parameter in the formIpv6Setup function.

totolink CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/0xmania/cve/tree/main/TOTOLINK-A3002RUV3.0-boa-formIpv6Setup-StackOverflow

Weakness type (CWE)

CWE-787CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

a3002ru-v3
a3002ru_firmware

Threat summary

4 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-03-09); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

totolink

Products

a3002ru-v3a3002ru_firmware

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-17	1	Disclosure1
2026-03-09	2	Disclosure2
2026-03-16	1	General1

Full discourse4 posts

Vulmon Vulnerability Feed@VulmonFeeds233d
Disclosure
CVE-2026-26736 Stack-Based Buffer Overflow in TOTOLINK A3002RU Router Firmware V3.0.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26736
Post summary
A stack‑based buffer overflow vulnerability (CVE‑2026‑26736) in TOTOLINK A3002RU router firmware v3.0.0 has been disclosed, but no proof‑of‑concept, exploit code, active exploitation, or mitigation details are provided.
1001039
4.0K followersView on X
CVE@CVEnew213d
Disclosure
CVE-2026-26736 TOTOLINK A3002RU_V3 V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the static_ipv6 parameter in the formIpv6Setup function. https://www.cve.org/CVERecord?id=CVE-2026-26736
Post summary
The post announces a stack‑based buffer overflow in TOTOLINK A3002RU firmware (CVE‑2026‑26736), identifying the static_ipv6 parameter in formIpv6Setup as the vulnerability vector.
00010343
56.6K followersView on X
David@DavidMarquet19207d
General
📌 Top CVEs recientes (CVSS>=7.0): 1. 💉 CVE-2026-2620 (CVSS: 7.3) 2. 🧱 CVE-2026-26736 (CVSS: 8.8) 3. 🧱 CVE-2026-26732 (CVSS: 8.8) 4. 🧱 CVE-2026-26731 (CVSS: 8.8) 5. ⚠️ CVE-2026-24734 (CVSS: 7.5) #CyberSecurity #CVE #Infosec
Post summary
The post enumerates recently disclosed high‑severity CVEs with their CVSS scores, but lacks details on exploitation, patches, or PoC.
0000057
169 followersView on X
Infoflowcloud@infoflowcloud213d
Disclosure
🚨*CVE* CVE-2026-26736 TOTOLINK A3002RU_V3 V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the static_ipv6 parameter in the formIpv6Setup function. https://www.cve.org/CVERecord?id=CVE-2026-26736 ----- Traducción: CVE-2026-26736 TOTOLINK A300… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑26736, indicating a stack‑based buffer overflow in TOTOLINK A3002RU_V3, but provides no PoC, exploit, patch, or active exploitation details.
0000036
56 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	totolink	a3002ru-v3	-	-	-
OS	totolink	a3002ru_firmware	-	-	-

Explore more

Back to dashboard totolink CVEs a3002ru-v3 vulnerabilities

What researchers are saying

CVE-2026-26736

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A stack‑based buffer overflow vulnerability (CVE‑2026‑26736) in TOTOLINK A3002RU router firmware v3.0.0 has been disclosed, but no proof‑of‑concept, exploit code, active exploitation, or mitigation details are provided.

CVE@CVEnewDisclosure

The post announces a stack‑based buffer overflow in TOTOLINK A3002RU firmware (CVE‑2026‑26736), identifying the static_ipv6 parameter in formIpv6Setup as the vulnerability vector.

David@DavidMarquet19General

The post enumerates recently disclosed high‑severity CVEs with their CVSS scores, but lacks details on exploitation, patches, or PoC.

Infoflowcloud@infoflowcloudDisclosure

The post announces CVE‑2026‑26736, indicating a stack‑based buffer overflow in TOTOLINK A3002RU_V3, but provides no PoC, exploit, patch, or active exploitation details.