🚨 ROUTER SECURITY — A NEW TOTOLINK A3002MU BUFFER OVERFLOW HAS A PUBLIC EXPLOIT CVE-2026-90607 CyberSignal Priority: 🟠 HIGH A newly published vulnerability affects the TOTOLINK A3002MU router. The vulnerable component is: /boafrm/formNewSchedule inside the device's boa web component. The problem: BUFFER OVERFLOW triggered through manipulation of the: submit-url argument. Public vulnerability information says: → the attack can be performed remotely → exploit details are publicly available → confidentiality, integrity and availability can all be affected Tracked as: CVE-2026-90607 CWE-119 / CWE-120 Affected firmware identified in the disclosure: Hh-B20211125.1046 This is particularly relevant because consumer and SMB routers are attractive targets for: botnets ↓ proxy infrastructure ↓ credential attacks ↓ traffic interception ↓ lateral movement 🛡️ Defender action If you operate this model: → check vendor firmware immediately → remove remote administration exposure → restrict management interfaces to trusted networks → replace unsupported hardware if no remediation is available 🧠 CyberSignal insight An old router at the edge of the network can quietly become the attacker's infrastructure inside it. Source: CVE-2026-90607 · NVD references Published September 14, 2026