A7100RU vulnerabilities | LiveThreat CVE Feed

Product

A7100RU

by Totolink · last CVE Apr 13, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities77 In the news0 Timeline

Severity mix

Critical 70High 7Medium 0Low 0

Severity

All severities77 Critical70 High7 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add A7100RU to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-6195	9.8	14%	Apr 13	Totolink A7100RU CGI cstecgi.cgi setPasswordCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-6156	9.8	2%	Apr 13	Totolink A7100RU CGI cstecgi.cgi setIpQosRules os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-6155	9.8	2%	Apr 13	Totolink A7100RU CGI cstecgi.cgi setWanCfg os command injection Affected: 7.4cu.2313
CVE-2026-6154	9.8	2%	Apr 13	Totolink A7100RU CGI cstecgi.cgi setWizardCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-6140	9.8	2%	Apr 13	Totolink A7100RU CGI cstecgi.cgi UploadFirmwareFile os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-6139	9.8	2%	Apr 13	Totolink A7100RU CGI cstecgi.cgi UploadOpenVpnCert os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-6138	9.8	2%	Apr 13	Totolink A7100RU CGI cstecgi.cgi setAccessDeviceCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-6132	9.8	2%	Apr 12	Totolink A7100RU CGI cstecgi.cgi setLedCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-6131	9.8	2%	Apr 12	Totolink A7100RU CGI cstecgi.cgi setTracerouteCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-6116	9.8	2%	Apr 12	Totolink A7100RU CGI cstecgi.cgi setDiagnosisCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-6115	9.8	2%	Apr 12	Totolink A7100RU CGI cstecgi.cgi setAppCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-6114	9.8	2%	Apr 12	Totolink A7100RU CGI cstecgi.cgi setNetworkCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-6113	9.8	2%	Apr 12	Totolink A7100RU CGI cstecgi.cgi setTtyServiceCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-6112	9.8	2%	Apr 12	Totolink A7100RU CGI cstecgi.cgi setRadvdCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-6029	9.8	3%	Apr 10	Totolink A7100RU CGI cstecgi.cgi setVpnAccountCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-6028	9.8	3%	Apr 10	Totolink A7100RU CGI cstecgi.cgi setPptpServerCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-6027	9.8	2%	Apr 10	Totolink A7100RU CGI cstecgi.cgi setUrlFilterRules os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-6026	9.8	3%	Apr 10	Totolink A7100RU CGI cstecgi.cgi setPortalConfWeChat os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-6025	9.8	3%	Apr 10	Totolink A7100RU CGI cstecgi.cgi setSyslogCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-5997	9.8	2%	Apr 10	Totolink A7100RU CGI cstecgi.cgi setLoginPasswordCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-5996	9.8	2%	Apr 10	Totolink A7100RU CGI cstecgi.cgi setAdvancedInfoShow os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-5995	9.8	2%	Apr 10	Totolink A7100RU CGI cstecgi.cgi setMiniuiHomeInfoShow os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-5994	9.8	2%	Apr 10	Totolink A7100RU CGI cstecgi.cgi setTelnetCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-5993	9.8	2%	Apr 10	Totolink A7100RU CGI cstecgi.cgi setWiFiGuestCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-5978	9.8	2%	Apr 9	Totolink A7100RU CGI cstecgi.cgi setWiFiAclRules os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-5977	9.8	2%	Apr 9	Totolink A7100RU CGI cstecgi.cgi setWiFiBasicCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-5976	9.8	2%	Apr 9	Totolink A7100RU CGI cstecgi.cgi setStorageCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-5975	9.8	2%	Apr 9	Totolink A7100RU CGI cstecgi.cgi setDmzCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-5854	9.8	17%	Apr 9	Totolink A7100RU CGI cstecgi.cgi setWiFiEasyCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-5853	9.8	14%	Apr 9	Totolink A7100RU CGI cstecgi.cgi setIpv6LanCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-5852	9.8	14%	Apr 9	Totolink A7100RU CGI cstecgi.cgi setIptvCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-5851	9.8	13%	Apr 9	Totolink A7100RU CGI cstecgi.cgi setUPnPCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2026-5850	9.8	15%	Apr 9	Totolink A7100RU CGI cstecgi.cgi setVpnPassCfg os command injection Affected: 7.4cu.2313_b20191024
CVE-2025-44655	9.8	0%	Jul 21	In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in the vsftpd.conf Affected: 7.4
CVE-2023-7095	9.8	14%	Dec 25	A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4cu.2313_B20191024 Affected: 7.4cu.2313_b20191024
CVE-2023-6906	9.8	2%	Dec 18	A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313_B20191024 Affected: 7.4cu.2313_b20191024
CVE-2023-33556	9.8	2%	Jun 7	TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the staticGw parameter at /setting/setWanIeCfg Affected: 7.4cu.2313_b20191024
CVE-2023-30054	9.8	2%	May 5	TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability Affected: 7.4cu.2313_b20191024
CVE-2023-30053	9.8	2%	May 5	TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Affected: 7.4cu.2313_b20191024
CVE-2023-26978	9.8	2%	Apr 7	TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting/setWanIeCfg Affected: 7.4cu.2313_b20191024
CVE-2023-26848	9.8	2%	Apr 7	TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRules Affected: 7.4cu.2313_b20191024
CVE-2023-27232	9.8	2%	Mar 28	TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wanStrategy parameter at /setting/setWanIeCfg Affected: 7.4cu.2313_b20191024
CVE-2023-27231	9.8	2%	Mar 28	TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the downBw parameter at /setting/setWanIeCfg Affected: 7.4cu.2313_b20191024
CVE-2023-27229	9.8	2%	Mar 28	TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the upBw parameter at /setting/setWanIeCfg Affected: 7.4cu.2313_b20191024
CVE-2023-27135	9.8	2%	Mar 23	TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled parameter at /setting/setWanIeCfg Affected: 7.4cu.2313_b20191024
CVE-2023-25395	9.8	2%	Mar 8	TOTOlink A7100RU V7.4cu.2313_B20191024 router was discovered to contain a command injection vulnerability via the ou parameter at /setting/delStaticDhcpRules Affected: 7.4cu.2313_b20191024
CVE-2023-24184	9.8	1%	Feb 21	TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability Affected: 7.4cu.2313_b20191024
CVE-2023-24238	9.8	2%	Feb 16	TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the city parameter at setting/delStaticDhcpRules Affected: 7.4cu.2313_b20191024
CVE-2023-24236	9.8	2%	Feb 16	TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the province parameter at setting/delStaticDhcpRules Affected: 7.4cu.2313_b20191024
CVE-2023-24276	9.8	2%	Feb 6	TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules Affected: 7.4cu.2313_b20191024