totolink

1,236 tracked vulnerabilities.

CVE-2026-31160 MEDIUM
ToToLink A3300R v17.0.0cu.557_B20221024 - Command Injection
Apr 23, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-31159 MEDIUM
ToToLink A3300R v17.0.0cu.557_B20221024 - Command Injection
Apr 23, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-6195 CRITICAL
Totolink A7100RU CGI cstecgi.cgi setPasswordCfg os command injection
Apr 13, 2026
CVSS 9.8
EPSS 0.14
CVE-2026-6194 HIGH
Totolink A3002MU HTTP Request formWlanSetup sub_410188 stack-based overflow
Apr 13, 2026
CVSS 8.8
EPSS 0.00
CVE-2026-6168 HIGH
TOTOLINK A7000R cstecgi.cgi setWiFiEasyGuestCfg stack-based overflow
Apr 13, 2026
CVSS 8.8
EPSS 0.01
CVE-2026-6158 HIGH
Totolink N300RH upgrade.so setUpgradeUboot os command injection
Apr 13, 2026
CVSS 7.3
EPSS 0.01
CVE-2026-6157 HIGH
Totolink A800R app.so setAppEasyWizardConfig buffer overflow
Apr 13, 2026
CVSS 8.8
EPSS 0.00
CVE-2026-6156 CRITICAL
Totolink A7100RU CGI cstecgi.cgi setIpQosRules os command injection
Apr 13, 2026
CVSS 9.8
EPSS 0.02
CVE-2026-6155 CRITICAL
Totolink A7100RU CGI cstecgi.cgi setWanCfg os command injection
Apr 13, 2026
CVSS 9.8
EPSS 0.02
CVE-2026-6154 CRITICAL
Totolink A7100RU CGI cstecgi.cgi setWizardCfg os command injection
Apr 13, 2026
CVSS 9.8
EPSS 0.02
CVE-2026-6140 CRITICAL
Totolink A7100RU CGI cstecgi.cgi UploadFirmwareFile os command injection
Apr 13, 2026
CVSS 9.8
EPSS 0.02
CVE-2026-6139 CRITICAL
Totolink A7100RU CGI cstecgi.cgi UploadOpenVpnCert os command injection
Apr 13, 2026
CVSS 9.8
EPSS 0.02
CVE-2026-6138 CRITICAL
Totolink A7100RU CGI cstecgi.cgi setAccessDeviceCfg os command injection
Apr 13, 2026
CVSS 9.8
EPSS 0.02
CVE-2026-6132 CRITICAL
Totolink A7100RU CGI cstecgi.cgi setLedCfg os command injection
Apr 12, 2026
CVSS 9.8
EPSS 0.02
CVE-2026-6131 CRITICAL
Totolink A7100RU CGI cstecgi.cgi setTracerouteCfg os command injection
Apr 12, 2026
CVSS 9.8
EPSS 0.02
CVE-2026-6116 CRITICAL
Totolink A7100RU CGI cstecgi.cgi setDiagnosisCfg os command injection
Apr 12, 2026
CVSS 9.8
EPSS 0.02
CVE-2026-6115 CRITICAL
Totolink A7100RU CGI cstecgi.cgi setAppCfg os command injection
Apr 12, 2026
CVSS 9.8
EPSS 0.02
CVE-2026-6114 CRITICAL
Totolink A7100RU CGI cstecgi.cgi setNetworkCfg os command injection
Apr 12, 2026
CVSS 9.8
EPSS 0.02
CVE-2026-6113 CRITICAL
Totolink A7100RU CGI cstecgi.cgi setTtyServiceCfg os command injection
Apr 12, 2026
CVSS 9.8
EPSS 0.02
CVE-2026-6112 CRITICAL
Totolink A7100RU CGI cstecgi.cgi setRadvdCfg os command injection
Apr 12, 2026
CVSS 9.8
EPSS 0.02
CVE-2026-6029 CRITICAL
Totolink A7100RU CGI cstecgi.cgi setVpnAccountCfg os command injection
Apr 10, 2026
CVSS 9.8
EPSS 0.03
CVE-2026-6028 CRITICAL
Totolink A7100RU CGI cstecgi.cgi setPptpServerCfg os command injection
Apr 10, 2026
CVSS 9.8
EPSS 0.03
CVE-2026-6027 CRITICAL
Totolink A7100RU CGI cstecgi.cgi setUrlFilterRules os command injection
Apr 10, 2026
CVSS 9.8
EPSS 0.02
CVE-2026-6026 CRITICAL
Totolink A7100RU CGI cstecgi.cgi setPortalConfWeChat os command injection
Apr 10, 2026
CVSS 9.8
EPSS 0.03
CVE-2026-6025 CRITICAL
Totolink A7100RU CGI cstecgi.cgi setSyslogCfg os command injection
Apr 10, 2026
CVSS 9.8
EPSS 0.03
Products
x5000r_firmware 70 a3300r_firmware 64 a3002r_firmware 61 x6000r_firmware 57 A8000RU 50 a3002ru_firmware 49 a3100r_firmware 47 x2000r_firmware 45 a3700r_firmware 43 A7100RU 40 t6_firmware 39 n600r_firmware 38 a7100ru_firmware 37 ex1200t_firmware 37 lr350_firmware 36 a7000r_firmware 35 a950rg_firmware 33 a702r_firmware 32 a810r_firmware 29 a720r_firmware 28 ex1800t_firmware 28 nr1800x_firmware 27 t8_firmware 26 a3000ru_firmware 25 a3600r_firmware 25 a830r_firmware 25 x15_firmware 25 ca300-poe_firmware 24 a800r_firmware 23 t10_firmware 22
Quick Filters
Critical CVEs With Exploits In CISA KEV