A7
Product
A7100RU
77
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 70High 7Medium 0Low 0
Watch
Add A7100RU to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-6195 | 9.8 | Apr 13 | Totolink A7100RU CGI cstecgi.cgi setPasswordCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-6156 | 9.8 | Apr 13 | Totolink A7100RU CGI cstecgi.cgi setIpQosRules os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-6155 | 9.8 | Apr 13 | Totolink A7100RU CGI cstecgi.cgi setWanCfg os command injection Affected: 7.4cu.2313 |
| CVE-2026-6154 | 9.8 | Apr 13 | Totolink A7100RU CGI cstecgi.cgi setWizardCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-6140 | 9.8 | Apr 13 | Totolink A7100RU CGI cstecgi.cgi UploadFirmwareFile os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-6139 | 9.8 | Apr 13 | Totolink A7100RU CGI cstecgi.cgi UploadOpenVpnCert os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-6138 | 9.8 | Apr 13 | Totolink A7100RU CGI cstecgi.cgi setAccessDeviceCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-6132 | 9.8 | Apr 12 | Totolink A7100RU CGI cstecgi.cgi setLedCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-6131 | 9.8 | Apr 12 | Totolink A7100RU CGI cstecgi.cgi setTracerouteCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-6116 | 9.8 | Apr 12 | Totolink A7100RU CGI cstecgi.cgi setDiagnosisCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-6115 | 9.8 | Apr 12 | Totolink A7100RU CGI cstecgi.cgi setAppCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-6114 | 9.8 | Apr 12 | Totolink A7100RU CGI cstecgi.cgi setNetworkCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-6113 | 9.8 | Apr 12 | Totolink A7100RU CGI cstecgi.cgi setTtyServiceCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-6112 | 9.8 | Apr 12 | Totolink A7100RU CGI cstecgi.cgi setRadvdCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-6029 | 9.8 | Apr 10 | Totolink A7100RU CGI cstecgi.cgi setVpnAccountCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-6028 | 9.8 | Apr 10 | Totolink A7100RU CGI cstecgi.cgi setPptpServerCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-6027 | 9.8 | Apr 10 | Totolink A7100RU CGI cstecgi.cgi setUrlFilterRules os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-6026 | 9.8 | Apr 10 | Totolink A7100RU CGI cstecgi.cgi setPortalConfWeChat os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-6025 | 9.8 | Apr 10 | Totolink A7100RU CGI cstecgi.cgi setSyslogCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-5997 | 9.8 | Apr 10 | Totolink A7100RU CGI cstecgi.cgi setLoginPasswordCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-5996 | 9.8 | Apr 10 | Totolink A7100RU CGI cstecgi.cgi setAdvancedInfoShow os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-5995 | 9.8 | Apr 10 | Totolink A7100RU CGI cstecgi.cgi setMiniuiHomeInfoShow os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-5994 | 9.8 | Apr 10 | Totolink A7100RU CGI cstecgi.cgi setTelnetCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-5993 | 9.8 | Apr 10 | Totolink A7100RU CGI cstecgi.cgi setWiFiGuestCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-5978 | 9.8 | Apr 9 | Totolink A7100RU CGI cstecgi.cgi setWiFiAclRules os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-5977 | 9.8 | Apr 9 | Totolink A7100RU CGI cstecgi.cgi setWiFiBasicCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-5976 | 9.8 | Apr 9 | Totolink A7100RU CGI cstecgi.cgi setStorageCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-5975 | 9.8 | Apr 9 | Totolink A7100RU CGI cstecgi.cgi setDmzCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-5854 | 9.8 | Apr 9 | Totolink A7100RU CGI cstecgi.cgi setWiFiEasyCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-5853 | 9.8 | Apr 9 | Totolink A7100RU CGI cstecgi.cgi setIpv6LanCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-5852 | 9.8 | Apr 9 | Totolink A7100RU CGI cstecgi.cgi setIptvCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-5851 | 9.8 | Apr 9 | Totolink A7100RU CGI cstecgi.cgi setUPnPCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2026-5850 | 9.8 | Apr 9 | Totolink A7100RU CGI cstecgi.cgi setVpnPassCfg os command injection Affected: 7.4cu.2313_b20191024 |
| CVE-2025-44655 | 9.8 | Jul 21 | In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in the vsftpd.conf Affected: 7.4 |
| CVE-2023-7095 | 9.8 | Dec 25 | A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4cu.2313_B20191024 Affected: 7.4cu.2313_b20191024 |
| CVE-2023-6906 | 9.8 | Dec 18 | A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313_B20191024 Affected: 7.4cu.2313_b20191024 |
| CVE-2023-33556 | 9.8 | Jun 7 | TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the staticGw parameter at /setting/setWanIeCfg Affected: 7.4cu.2313_b20191024 |
| CVE-2023-30054 | 9.8 | May 5 | TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability Affected: 7.4cu.2313_b20191024 |
| CVE-2023-30053 | 9.8 | May 5 | TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Affected: 7.4cu.2313_b20191024 |
| CVE-2023-26978 | 9.8 | Apr 7 | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting/setWanIeCfg Affected: 7.4cu.2313_b20191024 |
| CVE-2023-26848 | 9.8 | Apr 7 | TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRules Affected: 7.4cu.2313_b20191024 |
| CVE-2023-27232 | 9.8 | Mar 28 | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wanStrategy parameter at /setting/setWanIeCfg Affected: 7.4cu.2313_b20191024 |
| CVE-2023-27231 | 9.8 | Mar 28 | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the downBw parameter at /setting/setWanIeCfg Affected: 7.4cu.2313_b20191024 |
| CVE-2023-27229 | 9.8 | Mar 28 | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the upBw parameter at /setting/setWanIeCfg Affected: 7.4cu.2313_b20191024 |
| CVE-2023-27135 | 9.8 | Mar 23 | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled parameter at /setting/setWanIeCfg Affected: 7.4cu.2313_b20191024 |
| CVE-2023-25395 | 9.8 | Mar 8 | TOTOlink A7100RU V7.4cu.2313_B20191024 router was discovered to contain a command injection vulnerability via the ou parameter at /setting/delStaticDhcpRules Affected: 7.4cu.2313_b20191024 |
| CVE-2023-24184 | 9.8 | Feb 21 | TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability Affected: 7.4cu.2313_b20191024 |
| CVE-2023-24238 | 9.8 | Feb 16 | TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the city parameter at setting/delStaticDhcpRules Affected: 7.4cu.2313_b20191024 |
| CVE-2023-24236 | 9.8 | Feb 16 | TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the province parameter at setting/delStaticDhcpRules Affected: 7.4cu.2313_b20191024 |
| CVE-2023-24276 | 9.8 | Feb 6 | TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules Affected: 7.4cu.2313_b20191024 |
