CVE-2026-152717.5HighCWE-272

CVE-2026-15271: TOTOLINK EX200 Web boa.conf least privilege violation

TOTOLINK · A3000RU

Affected: TOTOLINK A3000RU · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.7%probability of exploitation in the next 30 days

53rd percentile

050100

Higher than 53% of scored CVEs

7.5HighCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 up to 20260906. Affected by this issue is some unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. The manipulation leads to least privilege violation. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitation is known to be difficult.

Affected products7

From the CVE record. A product or version that is not listed is unknown, not unaffected.

TOTOLINK · A3000RU20260906
TOTOLINK · A3100R20260906
TOTOLINK · A950RG20260906
TOTOLINK · AC1200T1020260906
TOTOLINK · CP45020260906
TOTOLINK · CS185R_T1020260906
TOTOLINK · EX20020260906

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Least Privilege Violation · Access Control
Vendor: TOTOLINK
Published: July 2026
Band: Unlikely (under 1%), July 2026

CoverageNo articles yet

No CyberSIXT article names CVE-2026-15271 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.