Log in Start free

TOTOLINK

Products

ProductCVEsExploitedLatest
A8000RU50–May 25, 2026
A7100RU42–Apr 13, 2026
Totolink30–Oct 20, 2026
A702R27–Sep 1, 2025
A3002RU27–Jul 1, 2025
A3002R25–Jun 22, 2025
X1525–Jul 27, 2025
A3600R20–Mar 29, 2026
EX1200T19–Jun 24, 2025
A3300R17–Apr 6, 2026
T616–Jul 25, 2025
N150RT15–Sep 28, 2026
N300RH15–May 31, 2026
N200RE14–Jul 8, 2025
A3002MU14–Oct 5, 2026
AC1200 T814–Jun 8, 2026
LR1200GB14–Feb 23, 2024
A3700R12–Jan 19, 2026
T1012–Dec 19, 2025
A950RG12–Nov 4, 2026
EX1200L11–Aug 17, 2026
A800R11–Aug 14, 2026
NR1800X10–Aug 31, 2026
X6000R10–Oct 6, 2026
CA750-PoE9–May 26, 2026
LR3509–Mar 27, 2026
N350RT9–Aug 5, 2024
X2000R9–Aug 28, 2025
WA3008–May 4, 2026
EX1800T8–Mar 17, 2025
A7000R7–Apr 13, 2026
A720R7–Aug 30, 2026
N600R7–Aug 30, 2026
EX2006–Oct 21, 2026
X5000R6–Sep 15, 2026
CA300-PoE5–Jun 25, 2025
A3000RU5–Jul 9, 2026
CP4505–Sep 3, 2026
X184–Mar 2, 2025
A3100R4–Jul 9, 2026
AC1200 T103–Sep 8, 2024
N300RT3–Apr 28, 2026
N200RE V52–Jan 26, 2024
T82–Jan 26, 2024
CP9002–Aug 5, 2024
N350R2–Aug 14, 2025
N302R Plus2–Jun 5, 2025
LR12002–Jul 30, 2024
X6000R AX30001–Feb 23, 2024
CS185R_T101–Jul 9, 2026
AC1200T101–Jul 9, 2026
A810R1–May 10, 2025
T10 AC12001–Aug 26, 2024
A8000R1–Apr 6, 2026
WA12001–Jan 8, 2026
A6000R1–Apr 4, 2025
X2000R_V21–Jan 7, 2024

Exploited and recent CVEs

  • CVE-2026-121600 Critical 9.9 TOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflow 0.5%
  • CVE-2026-121599 Critical 9.9 TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow 0.5%
  • CVE-2026-121598 Critical 9.9 TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow 0.5%
  • CVE-2026-121597 Critical 9.9 TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflow 0.6%
  • CVE-2026-116508 Critical 10.0 TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow 0.6%
  • CVE-2026-116507 Medium 5.3 TOTOLINK A950RG global.so getLanguageCfg information disclosure 0.4%
  • CVE-2026-116506 Critical 9.9 TOTOLINK A950RG firewall.so apmib_set command injection 1.9%
  • CVE-2026-116505 Critical 9.1 TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection 2.7%
  • CVE-2026-116504 Critical 9.9 TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection 1.5%
  • CVE-2026-114575 Critical 10.0 TOTOLINK A950RG product.so UploadCustomModule command injection 2.2%
  • CVE-2026-114383 Critical 10.0 TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow 0.7%
  • CVE-2026-114382 Critical 10.0 TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow 0.7%
  • CVE-2026-35499 Critical 9.1 An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbit 1.3%
  • CVE-2026-40627 Critical 9.1 An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arb 1.0%
  • CVE-2026-28763 Critical 9.1 A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request 0.7%
  • CVE-2026-41223 Critical 9.1 A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request c 0.7%
  • CVE-2026-33568 Critical 9.1 A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead 1.0%
  • CVE-2026-41222 Critical 9.1 A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can 0.7%
  • CVE-2026-40615 Critical 9.1 A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP requ 0.7%
  • CVE-2026-42020 Critical 9.1 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request ca 0.7%
  • CVE-2026-42019 Critical 9.1 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request ca 0.7%
  • CVE-2026-42024 Critical 9.1 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially 0.5%
  • CVE-2026-42023 Critical 9.1 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially 0.5%
  • CVE-2026-42022 Critical 9.1 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially 0.5%
  • CVE-2026-42021 Critical 9.1 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially 0.5%
  • CVE-2026-42026 Critical 9.1 Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially cra 0.5%
  • CVE-2026-42025 Critical 9.1 Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially cra 0.5%
  • CVE-2026-9660 Critical 9.1 Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP re 0.5%
  • CVE-2026-9659 Critical 9.1 Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP re 0.8%
  • CVE-2026-9814 Critical 9.1 An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to 1.6%