CVE-2025-9782

A vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423. This vulnerability affects the function sub_4466F8 of the file /boafrm/formOneKeyAccessButton. Performing manipulation of the argument submit-url results in buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used.

• CWE-119
• CWE-120

• https://github.com/rew1X/CVE/blob/main/TOTOLINK/A702R/formOneKeyAccessButton/formOneKeyAccessButton.mdBroken Link
• https://github.com/rew1X/CVE/blob/main/TOTOLINK/A702R/formOneKeyAccessButton/formOneKeyAccessButton.md#pocBroken Link
• https://vuldb.com/?ctiid.322084Permissions Required
• https://vuldb.com/?id.322084Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.640990Third Party Advisory, VDB Entry
• https://www.totolink.net/Product

Published

Sep 1, 2025

Last Modified

Sep 26, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-9775A vulnerability was found in RemoteClinic up to 2.0. Impacte…9.8
• CVE-2025-9776The CatFolders – Tame Your WordPress Media Library by Catego…6.5
• CVE-2025-9778A security vulnerability has been detected in Tenda W12 up t…7
• CVE-2025-9779A vulnerability was detected in TOTOLINK A702R 4.0.0-B202111…8.8
• CVE-2025-9780A flaw has been found in TOTOLINK A702R 4.0.0-B20211108.1423…8.8
• CVE-2025-9781A vulnerability has been found in TOTOLINK A702R 4.0.0-B2021…8.8
• CVE-2025-9783A vulnerability was determined in TOTOLINK A702R 4.0.0-B2021…8.8
• CVE-2025-9784A flaw was found in Undertow where malformed client requests…7.5
• CVE-2025-9785PaperCut Print Deploy is an optional component that integrat…7.7
• CVE-2025-9786A vulnerability was found in Campcodes Online Learning Manag…9.8
• CVE-2025-9787Zohocorp ManageEngine Applications Manager versions 177400 a…6.1
• CVE-2025-9788A vulnerability was determined in SourceCodester/Campcodes S…9.8