CVE-2025-8246

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formRoute of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-119CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Jul 27, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-82478.8A vulnerability classified as critical has been found in Projectworlds Online Admission System 1.0. This affects an unknown part of the fileCVE-2025-82489.8A vulnerability classified as critical was found in code-projects Online Ordering System 1.0. This vulnerability affects unknown code of theCVE-2025-82499.8A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. This issue affects some unknownCVE-2025-82509.8A vulnerability, which was classified as critical, was found in code-projects Exam Form Submission 1.0. Affected is an unknown function of tCVE-2025-82519.8A vulnerability has been found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this vulnerability is an unCVE-2025-82529.8A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functCVE-2025-82539.8A vulnerability was found in code-projects Exam Form Submission 1.0. It has been classified as critical. This affects an unknown part of theCVE-2025-82549.8A vulnerability was found in Campcodes Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown cCVE-2025-82559.8A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects some unknown processiCVE-2025-82569.8A vulnerability classified as critical has been found in code-projects Online Ordering System 1.0. Affected is an unknown function of the fiCVE-2025-82575.3A vulnerability classified as problematic was found in Lobby Universe Lobby App up to 2.8.0 on Android. Affected by this vulnerability is anCVE-2025-82585.3A vulnerability, which was classified as problematic, has been found in Cool Mo Maigcal Number App up to 1.0.3 on Android. Affected by this
CVE-2025-8246: High severity, CVSS 7.5 | Vulnix