CVE-2026-15271

HIGH

A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 up to 20260906. Affected by this issue is some unknown functionality of the fi...

Affects 10 products across 1 vendor.

CVSS 3.17.5
CVSS v47.7
EPSS0.7%
Percentile52th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, high complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-266: CWE-266
CWE-272: CWE-272
Related Attack Patterns (CAPEC)
CAPEC-35 Leverage Executable Code in Non-Executable Files
via CWE-272
CAPEC-76 Manipulating Web Input to File System Calls
via CWE-272
CAPEC-17 Using Malicious Files
via CWE-272

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A high severity vulnerability (CVE-2026-15271) affects the target system. A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 up to 20260906. Affected by this issue is some unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. ...

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2026-15271?
A high severity vulnerability (CVE-2026-15271) affects the target system. A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 up to 20260906. Affected by this issue is some unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. ...
What is the CVSS score for CVE-2026-15271?
CVE-2026-15271 has CVSS 7.5 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.7%.
Is CVE-2026-15271 actively exploited?
No confirmed active exploitation of CVE-2026-15271 as of 2026-09-25.
How do I remediate CVE-2026-15271?
Apply vendor patches for CVE-2026-15271. Monitor Totolink advisories.
What systems are affected by CVE-2026-15271?
CVE-2026-15271 affects Totolink Ex200, A3100R, A3000Ru, A950Rg, Cp450.
Vulnerability Details
CVE IDCVE-2026-15271
CVSS VectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Published2026-07-09
Last Modified2026-09-03
ICS Relevance0%
Weakness (CWE)
CWE-266CWE-272
SourceNVD
Official Description

A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 up to 20260906. Affected by this issue is some unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. The manipulation leads to least privilege violation. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitation is known to be difficult.

Source: NIST NVD / MITRE CVE Database

Affected Products
VendorProductAffected Versions
Totolink Ex200 (device & firmware) 20260906
Totolink A3100R (device & firmware) 20260906
Totolink A3000Ru (device & firmware) 20260906
Totolink A950Rg (device & firmware) 20260906
Totolink Cp450 (device & firmware) 20260906
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 98 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
Related CVEs affecting Totolink
CVE-2026-85031 9.9 A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an... CVE-2023-31729 9.8 TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin... CVE-2023-46993 9.8 In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg reques... CVE-2025-6619 9.8 A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been declare... CVE-2022-28910 9.8 TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injec...
View all Totolink CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →