Critical · 9.8 CVE-2025-46060 EUVD-2025-18267GHSA-j345-5vxf-wffq

Buffer Overflow vulnerability in TOTOLINK N600R v4.3.0cu.7866_B2022506 allows a remote attacker to execute arbitrary code via the UPLOAD_FI…

Published Jun 13, 2025 · Updated Jul 5, 2026 · Assigned by mitre

Description

Buffer Overflow vulnerability in TOTOLINK N600R v4.3.0cu.7866_B2022506 allows a remote attacker to execute arbitrary code via the UPLOAD_FILENAME component

References

https://github.com/Luanruy/qax
https://github.com/Luanruy/qax/blob/main/CVE-2025-46060_Info.md