CVE-2026-42019

criticalpriority · track · 36EPSS 0.007 · 54 %ileUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.74% (54th) EPSS

CVSS 9.1 · critical

Is it mine?

0 products

Check your exposure

Who says so?

— sources

EPSS · scored 2026-10-27

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the pppoe_dns1 parameter.

cvss

Technical severity, 0–10. One row per scoring source.

9.1

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 8.3–9.1

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:Hprimary · talos-cna@cisco.com USexploitability 2.3 · impact 6

v3.18.3highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-121USprimary

affected products

Products and version ranges known to be affected.

No affected products recorded.

sources

Which sources assert this record, and when.

NVD CVE.org MITRE

published 2026-10-20modified 2026-10-22

related (5,137)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2021-27137US	—OT critical	4.00% (90th)	KEV	2026-07-16
An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a re…
CVE-2026-7273US	—OT critical	2.78% (86th)	KEV	2026-06-16
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to…
CVE-2025-53521US	—OT critical	2.30% (83rd)	KEV	2025-10-15
When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE). Note: Software versions which have reached…
CVE-2025-20352US	—OT critical	41.5% (99th)	KEV	2025-09-24
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote…
CVE-2025-32756US	critical9.8OT critical	30.9% (98th)	KEV	2025-05-13
A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMa…

+5132 more

references (1) nvd

External citations — patches, advisories, analysis.

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2394

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan