Totolink vulnerabilities

Products

• X5000r Firmware 70
• A3300r Firmware 64
• A3002r Firmware 61
• X6000r Firmware 57
• A3002ru Firmware 50
• A8000ru 50
• A3100r Firmware 47
• X2000r Firmware 45
• A3700r Firmware 43
• A7100ru 42
• T6 Firmware 39
• N600r Firmware 38
• A7100ru Firmware 37
• Ex1200t Firmware 37
• Lr350 Firmware 36
• A7000r Firmware 35
• A950rg Firmware 33
• A702r Firmware 32
• Totolink 30
• A810r Firmware 29
• A720r Firmware 28
• Ex1800t Firmware 28
• A3002ru 27
• A702r 27
• Nr1800x Firmware 27
• A3002r 26
• T8 Firmware 26
• A3000ru Firmware 25
• A3600r Firmware 25
• A830r Firmware 25
• X15 25
• X15 Firmware 25
• Ca300-poe Firmware 24
• A800r Firmware 23
• T10 Firmware 22
• N200re Firmware 21
• N350rt Firmware 21
• A3300r 20
• A3600r 20
• N150rt Firmware 20

Show 78 moreShow less

• Cp450 Firmware 19
• Ex1200t 19
• Ex200 Firmware 19
• Lr1200gb Firmware 19
• T6 16
• A3700r 15
• N150rt 15
• N300rh 15
• A3002mu 14
• Ac1200 T8 14
• Ca300-poe 14
• Cp450 14
• Lr1200gb 14
• Lr350 14
• N200re 14
• X18 Firmware 14
• A6000r Firmware 13
• Cp900 Firmware 13
• A950rg 12
• Ac1200 T8 Firmware 12
• N300rt Firmware 12
• T10 12
• X5000r 12
• A800r 11
• Ex1200l 11
• Ex1200l Firmware 11
• Nr1800x 11
• X6000r 11
• Ca600-poe Firmware 10
• Ex200 10
• X2000r 10
• Ca750-poe 9
• Ex1800t 9
• N350rt 9
• A860r Firmware 8
• Cp900l Firmware 8
• N600r 8
• Wa300 8
• A3000ru 7
• A7000r 7
• A720r 7
• N300rh Firmware 7
• A3100r 6
• Cp300\+ Firmware 6
• Ex300 V2 Firmware 6
• N300rt 6
• N100re Firmware 5
• T10 V2 Firmware 5
• N301rt Firmware 4
• N302r Firmware 4
• X18 4
• Ac1200 T10 3
• Ac1200 T10 Firmware 3
• Ac1200 T8 3
• Cp300\+ 3
• Cp900 3
• Cp900 L 3
• N200re-v5 Firmware 3
• N300rh-v3 Firmware 3
• N302r Plus Firmware 3
• Wa300 Firmware 3
• A8000ru Firmware 2
• A850r-v1 Firmware 2
• F1-v2 Firmware 2
• F2-v1 Firmware 2
• Lr1200 2
• Lr1200 Firmware 2
• N150rt-v2 Firmware 2
• N151rt-v2 Firmware 2
• N200re V5 2
• N300rh-v2 Firmware 2
• N300rt-v2 Firmware 2
• N302re Firmware 2
• N302r Plus 2
• N350r 2
• N350r Firmware 2
• T10 V2 2
• T8 2

Newest

• totolink ca300-poe TOTOLINK CA300-PoE cstecgi.cgi UploadCustomModule buffer overflow CVE-2026-124060 9.4 CriticalNovember 7, 2026
• totolink ca300-poe TOTOLINK CA300-PoE cstecgi.cgi setWiFiWdsAddConfig buffer overflow CVE-2026-124059 9.4 CriticalNovember 7, 2026
• totolink ca300-poe TOTOLINK CA300-PoE cstecgi.cgi setWiFiRepeaterConfig buffer overflow CVE-2026-124058 9.4 CriticalNovember 7, 2026
• totolink ca300-poe TOTOLINK CA300-PoE cstecgi.cgi setWiFiMultipleConfig buffer overflow CVE-2026-124057 9.4 CriticalNovember 7, 2026
• totolink ca300-poe TOTOLINK CA300-PoE cstecgi.cgi setWiFiBasicConfig buffer overflow CVE-2026-123961 9.4 CriticalNovember 7, 2026
• totolink ca300-poe TOTOLINK CA300-PoE cstecgi.cgi setWanConfig buffer overflow CVE-2026-123960 9.4 CriticalNovember 7, 2026
• totolink ca300-poe TOTOLINK CA300-PoE cstecgi.cgi setLanguageCfg buffer overflow CVE-2026-123959 9.4 CriticalNovember 7, 2026
• totolink ca300-poe TOTOLINK CA300-PoE cstecgi.cgi setLanConfig buffer overflow CVE-2026-123958 9.4 CriticalNovember 7, 2026
• totolink ca300-poe TOTOLINK CA300-PoE cstecgi.cgi setIpQosRules buffer overflow CVE-2026-123957 9.4 CriticalNovember 7, 2026
• totolink a950rg TOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflow CVE-2026-121600 9.4 CriticalNovember 4, 2026
• totolink a950rg TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow CVE-2026-121599 9.4 CriticalNovember 4, 2026
• totolink a950rg TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow CVE-2026-121598 9.4 CriticalNovember 4, 2026
• totolink a950rg A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the... CVE-2026-121597 9.9 CriticalNovember 4, 2026
• totolink a950rg TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow CVE-2026-116508 10.0 CriticalOctober 26, 2026
• totolink a950rg TOTOLINK A950RG global.so getLanguageCfg information disclosure CVE-2026-116507 6.9 MediumOctober 26, 2026
• totolink a950rg TOTOLINK A950RG firewall.so apmib_set command injection CVE-2026-116506 9.4 CriticalOctober 26, 2026
• totolink a950rg TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection CVE-2026-116505 9.4 CriticalOctober 26, 2026
• totolink a950rg TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection CVE-2026-116504 9.4 CriticalOctober 26, 2026
• totolink a950rg TOTOLINK A950RG product.so UploadCustomModule command injection CVE-2026-114575 10.0 CriticalOctober 22, 2026
• totolink ex200 TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow CVE-2026-114383 10.0 CriticalOctober 21, 2026
• totolink ex200 TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow CVE-2026-114382 10.0 CriticalOctober 21, 2026
• totolink An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of... CVE-2026-35499 9.1 CriticalOctober 20, 2026
• totolink A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr... CVE-2026-41223 9.1 CriticalOctober 20, 2026
• totolink An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of... CVE-2026-40627 9.1 CriticalOctober 20, 2026
• totolink A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname... CVE-2026-28763 9.1 CriticalOctober 20, 2026
• totolink A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality... CVE-2026-41222 9.1 CriticalOctober 20, 2026
• totolink A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName... CVE-2026-40615 9.1 CriticalOctober 20, 2026
• totolink A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of... CVE-2026-33568 9.1 CriticalOctober 20, 2026
• totolink Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe... CVE-2026-42020 9.1 CriticalOctober 20, 2026
• totolink Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe... CVE-2026-42019 9.1 CriticalOctober 20, 2026
• totolink Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup... CVE-2026-42026 9.1 CriticalOctober 20, 2026
• totolink Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup... CVE-2026-42025 9.1 CriticalOctober 20, 2026
• totolink Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static... CVE-2026-42024 9.1 CriticalOctober 20, 2026
• totolink Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static... CVE-2026-42023 9.1 CriticalOctober 20, 2026
• totolink Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static... CVE-2026-42022 9.1 CriticalOctober 20, 2026
• totolink Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static... CVE-2026-42021 9.1 CriticalOctober 20, 2026
• totolink An OS command injection vulnerability exists in the boa formWizard newPass functionality of... CVE-2026-9814 9.1 CriticalOctober 20, 2026
• totolink Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter... CVE-2026-9660 9.1 CriticalOctober 20, 2026
• totolink Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter... CVE-2026-9659 9.1 CriticalOctober 20, 2026
• totolink A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of... CVE-2026-9869 9.1 CriticalOctober 20, 2026
• totolink A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R ... CVE-2026-9827 9.1 CriticalOctober 20, 2026
• totolink A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of... CVE-2026-9817 9.1 CriticalOctober 20, 2026
• totolink A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R ... CVE-2026-10133 9.1 CriticalOctober 20, 2026
• totolink A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of... CVE-2026-10132 9.1 CriticalOctober 20, 2026
• totolink An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R... CVE-2026-10131 9.1 CriticalOctober 20, 2026
• totolink A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R... CVE-2026-10136 9.1 CriticalOctober 20, 2026
• totolink A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s):... CVE-2026-10135 9.1 CriticalOctober 20, 2026
• totolink A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R ... CVE-2026-10138 9.1 CriticalOctober 20, 2026
• totolink A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of... CVE-2026-10137 9.1 CriticalOctober 20, 2026
• totolink A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R ... CVE-2026-10141 9.1 CriticalOctober 20, 2026
• Show olderLoading…