CVE-2026-8137Disclosure

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability has been found in Totolink X5000R 9.1.0u.6369_B20230113. This vulnerability affects the function sub_458E40 of the file /boafrm/formDdns. The manipulation of the argument submit-url leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-05-08); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-05-08: 1Mentions · 2026-05-09: 1Technical Details · 2026-05-08: 1Technical Details · 2026-05-09: 105-0805-09
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-8137 A vulnerability has been found in Totolink X5000R 9.1.0u.6369_B20230113. This vulnerability affects the function sub_458E40 of the file /boafrm/formDdns. The manipulati… https://www.cve.org/CVERecord?id=CVE-2026-8137

    Post summary

    A new CVE-2026-8137 vulnerability was identified in the Totolink X5000R router, affecting the sub_458E40 function; no exploitation or patch details are provided.

    00000151
    57.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-8137 Buffer Overflow in Totolink X5000R 9.1.0u.6369_B20230113 formDdns Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8137

    Post summary

    A buffer overflow vulnerability (CVE-2026-8137) in the formDdns function of Totolink X5000R firmware has been disclosed, with details available on vulmon.com.

    0000038
    4.0K followersView on X

Explore more