CVE-2026-15271: TOTOLINK EX200 Web boa.conf least privilege violation

Description

A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 up to 20260906. Affected by this issue is some unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. The manipulation leads to least privilege violation. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitation is known to be difficult.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

High

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.7% · higher than 53% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

A3

A3000RU · TOTOLINK

20260906 · source: vendor

A3

A3100R · TOTOLINK

20260906 · source: vendor

A9

A950RG · TOTOLINK

20260906 · source: vendor

AC

AC1200T10 · TOTOLINK

20260906 · source: vendor

CP

CP450 · TOTOLINK

20260906 · source: vendor

CS

CS185R_T10 · TOTOLINK

20260906 · source: vendor

EX

EX200 · TOTOLINK

20260906 · source: vendor