Totolink - vulnerabilities (CVEs)

1310 CVEs in 182 products, 42 in the last 30 days, newest from 2026-10-26.

Products

A7100ru Firmware - 77 CVEs
X5000r Firmware - 73 CVEs
A3300r Firmware - 65 CVEs
A3002r Firmware - 61 CVEs
X6000r Firmware - 58 CVEs
A8000ru Firmware - 52 CVEs
A3002ru Firmware - 50 CVEs
A3100r Firmware - 47 CVEs
X2000r Firmware - 45 CVEs
A3700r Firmware - 43 CVEs
N600r Firmware - 41 CVEs
A950rg Firmware - 39 CVEs
T6 Firmware - 39 CVEs
Ex1200t Firmware - 37 CVEs
A7000r Firmware - 36 CVEs
Lr350 Firmware - 36 CVEs
A800r Firmware - 33 CVEs
A702r Firmware - 32 CVEs
Nr1800x Firmware - 32 CVEs
Totolink - 30 CVEs
A720r Firmware - 29 CVEs
A810r Firmware - 29 CVEs
Ex1800t Firmware - 28 CVEs
A3002ru - 27 CVEs
A702r - 27 CVEs
T8 Firmware - 26 CVEs
A3000ru Firmware - 25 CVEs
A3002r - 25 CVEs
A3600r Firmware - 25 CVEs
A830r Firmware - 25 CVEs
X15 - 25 CVEs
X15 Firmware - 25 CVEs
Ca300-poe Firmware - 24 CVEs
Ex200 Firmware - 22 CVEs
T10 Firmware - 22 CVEs
Cp450 Firmware - 21 CVEs
N150rt Firmware - 21 CVEs
N200re Firmware - 21 CVEs
N350rt Firmware - 21 CVEs
Ex1200t - 19 CVEs
Lr1200gb Firmware - 19 CVEs
A3600r - 18 CVEs
T6 - 16 CVEs
N300rh Firmware - 15 CVEs
N300rt Firmware - 15 CVEs
Lr1200gb - 14 CVEs
N150rt - 14 CVEs
N200re - 14 CVEs
X18 Firmware - 14 CVEs
A3002mu - 13 CVEs
A6000r Firmware - 13 CVEs
Ac1200 T8 - 13 CVEs
Cp900 Firmware - 13 CVEs
Ac1200 T8 Firmware - 12 CVEs
A3700r - 11 CVEs
Ex1200l Firmware - 11 CVEs
T10 - 11 CVEs
Ca600-poe Firmware - 10 CVEs
Cp450 - 10 CVEs
Ca750-poe - 9 CVEs
Ex1200l - 9 CVEs
N350rt - 9 CVEs
X2000r - 9 CVEs
A860r Firmware - 8 CVEs
Cp900l Firmware - 8 CVEs
Ex1800t - 8 CVEs
Wa300 Firmware - 8 CVEs
X6000r - 8 CVEs
Lr350 - 7 CVEs
A720r - 6 CVEs
Cp300+ Firmware - 6 CVEs
Ex300 V2 Firmware - 6 CVEs
A3300r - 5 CVEs
Ca300-poe - 5 CVEs
N100re Firmware - 5 CVEs
N300rh - 5 CVEs
T10 V2 Firmware - 5 CVEs
X5000r - 5 CVEs
A3000ru - 4 CVEs
Ex200 - 4 CVEs
N301rt Firmware - 4 CVEs
N302r Firmware - 4 CVEs
X18 - 4 CVEs
A3100r - 3 CVEs
Ac1200 T10 - 3 CVEs
Ac1200 T10 Firmware - 3 CVEs
Cp300+ - 3 CVEs
Cp900 L - 3 CVEs
N200re-v5 Firmware - 3 CVEs
N300rh-v3 Firmware - 3 CVEs
N300rt - 3 CVEs
N302r Plus Firmware - 3 CVEs
N600r - 3 CVEs
A7000r - 2 CVEs
A7100ru - 2 CVEs
A850r-v1 Firmware - 2 CVEs
Cp900 - 2 CVEs
F1-v2 Firmware - 2 CVEs
F2-v1 Firmware - 2 CVEs
Lr1200 - 2 CVEs
Lr1200 Firmware - 2 CVEs
N150rt-v2 Firmware - 2 CVEs
N151rt-v2 Firmware - 2 CVEs
N200re V5 - 2 CVEs
N300rh-v2 Firmware - 2 CVEs
N300rt-v2 Firmware - 2 CVEs
N302r Plus - 2 CVEs
N302re Firmware - 2 CVEs
N350r - 2 CVEs
N350r Firmware - 2 CVEs
T10 V2 - 2 CVEs
T8 - 2 CVEs
A3002ru-v1 Firmware - 1 CVEs
A3002ru-v2 Firmware - 1 CVEs
A3002ru-v3 Firmware - 1 CVEs
A6000r - 1 CVEs
A6000ub Firmware - 1 CVEs
A7000ru Firmware - 1 CVEs
A702r-v2 Firmware - 1 CVEs
A702r-v3 Firmware - 1 CVEs
A8000r - 1 CVEs
A800r - 1 CVEs
A810r - 1 CVEs
A950rg - 1 CVEs
Ac1200t10 - 1 CVEs
Ar3100r Firmware - 1 CVEs
Ax3000 - 1 CVEs
Cp300 Firmware - 1 CVEs
Cs185r T10 - 1 CVEs
N100re-v3 Firmware - 1 CVEs
N200re-v3 Firmware - 1 CVEs
N200re-v4 Firmware - 1 CVEs
N200re V5 Firmware - 1 CVEs
N210re Firmware - 1 CVEs
N300rb Firmware - 1 CVEs
Nr1800x - 1 CVEs
Outdoor Cpe Cp450 - 1 CVEs
T10 Ac1200 - 1 CVEs
Wa1200 - 1 CVEs
Wa1200-poe - 1 CVEs
Wa1200-poe Firmware - 1 CVEs
Wifi Usb Driver - 1 CVEs
X2000r V2 - 1 CVEs
X6000r Ax3000 - 1 CVEs
A3002r-he - 0 CVEs
A3002r-he Firmware - 0 CVEs
A3002ru-v1 - 0 CVEs
A3002ru-v2 - 0 CVEs
A3002ru-v3 - 0 CVEs
A6000ub - 0 CVEs
A7000ru - 0 CVEs
A702r-v2 - 0 CVEs
A702r-v3 - 0 CVEs
A8000ru - 0 CVEs
A830r - 0 CVEs
A850r-v1 - 0 CVEs
A860r - 0 CVEs
Ar3100r - 0 CVEs
Ar810r - 0 CVEs
Ar810r Firmware - 0 CVEs
Ca600-poe - 0 CVEs
Cp300 - 0 CVEs
Cp900l - 0 CVEs
Ex300 V2 - 0 CVEs
F1-v2 - 0 CVEs
F2-v1 - 0 CVEs
N100re - 0 CVEs
N100re-v3 - 0 CVEs
N150rt-v2 - 0 CVEs
N151rt-v2 - 0 CVEs
N200re-v3 - 0 CVEs
N200re-v4 - 0 CVEs
N200re-v5 - 0 CVEs
N210re - 0 CVEs
N300rb - 0 CVEs
N300rh-v2 - 0 CVEs
N300rh-v3 - 0 CVEs
N300rt-v2 - 0 CVEs
N301rt - 0 CVEs
N302r - 0 CVEs
Soho - 0 CVEs
Wa300 - 0 CVEs

Newest CVEs of Totolink

CVE-2026-116508 - CVSS 10 (critical), 2026-10-26: A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function sub_402340 of the file infostat.cgi of…
CVE-2026-116507 - CVSS 6.9 (medium), 2026-10-26: A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so.…
CVE-2026-116506 - CVSS 9.9 (critical), 2026-10-26: A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file firewall.so. This manipulation causes…
CVE-2026-116505 - CVSS 9.4 (critical), 2026-10-26: A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the…
CVE-2026-116504 - CVSS 9.9 (critical), 2026-10-26: A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setCloudUpgradeFW of the file lib/cste_modules/upgrade.so…
CVE-2026-114575 - CVSS 10 (critical), 2026-10-22: A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file…
CVE-2026-114383 - CVSS 10 (critical), 2026-10-21: A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component…
CVE-2026-114382 - CVSS 10 (critical), 2026-10-21: A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the…
CVE-2026-35499 - CVSS 9.1 (critical), 2026-10-20: An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A…
CVE-2026-41223 - CVSS 9.1 (critical), 2026-10-20: A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s):…
CVE-2026-40627 - CVSS 9.1 (critical), 2026-10-20: An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A…
CVE-2026-28763 - CVSS 9.1 (critical), 2026-10-20: A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s):…
CVE-2026-41222 - CVSS 9.1 (critical), 2026-10-20: A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s):…
CVE-2026-33568 - CVSS 9.1 (critical), 2026-10-20: A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327).…
CVE-2026-40615 - CVSS 9.1 (critical), 2026-10-20: A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s):…
CVE-2026-42020 - CVSS 9.1 (critical), 2026-10-20: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R…
CVE-2026-42019 - CVSS 9.1 (critical), 2026-10-20: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R…
CVE-2026-42021 - CVSS 9.1 (critical), 2026-10-20: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…
CVE-2026-42024 - CVSS 9.1 (critical), 2026-10-20: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…
CVE-2026-42023 - CVSS 9.1 (critical), 2026-10-20: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…
CVE-2026-42026 - CVSS 9.1 (critical), 2026-10-20: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s):…
CVE-2026-42022 - CVSS 9.1 (critical), 2026-10-20: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…
CVE-2026-42025 - CVSS 9.1 (critical), 2026-10-20: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s):…
CVE-2026-9659 - CVSS 9.1 (critical), 2026-10-20: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s):…
CVE-2026-9814 - CVSS 9.1 (critical), 2026-10-20: An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…
CVE-2026-9660 - CVSS 9.1 (critical), 2026-10-20: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s):…
CVE-2026-9817 - CVSS 9.1 (critical), 2026-10-20: A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…
CVE-2026-9869 - CVSS 9.1 (critical), 2026-10-20: A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327).…
CVE-2026-9827 - CVSS 9.1 (critical), 2026-10-20: A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…
CVE-2026-10133 - CVSS 9.1 (critical), 2026-10-20: A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially…