NR
Product
NR1800X
32
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 10High 19Medium 3Low 0
Watch
Add NR1800X to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-82616 | 9.9 | Aug 31 | TOTOLINK NR1800X cstecgi.cgi setUploadSetting stack-based overflow Affected: 9.1.0u.6681_B20230703 |
| CVE-2026-15701 | 9.8 | Jul 14 | Totolink NR1800X lighttpd formLogout.htm Form_Logout stack-based overflow Affected: 9.1.0u.6279_B20210910 |
| CVE-2026-7546 | 9.8 | May 1 | Totolink NR1800X lighttpd find_host_ip stack-based overflow Affected: 9.1.0u.6279_B20210910 |
| CVE-2026-5030 | 9.8 | Mar 29 | Totolink NR1800X Telnet Service cstecgi.cgi NTPSyncWithHost command injection Affected: 9.1.0u.6279_B20210910 |
| CVE-2025-45841 | 9.8 | May 8 | TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function Affected: 9.1.0u.6681_b20230703 |
| CVE-2023-7220 | 9.8 | Jan 9 | A vulnerability was found in Totolink NR1800X 9.1.0u.6279_B20210910 and classified as critical Affected: 9.1.0u.6279_b20210910 |
| CVE-2023-36340 | 9.8 | Oct 16 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth Affected: 9.1.0u.6279_b20210910 |
| CVE-2022-41525 | 9.8 | Oct 6 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the OpModeCfg function at /cgi-bin/cstecgi.cgi Affected: 9.1.0u.6279_b20210910 |
| CVE-2022-41518 | 9.8 | Oct 6 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi Affected: 9.1.0u.6279_b20210910 |
| CVE-2022-41522 | 9.8 | Oct 6 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an unauthenticated stack overflow via the "main" function Affected: 9.1.0u.6279_b20210910 |
| CVE-2026-7548 | 8.8 | May 1 | Totolink NR1800X cstecgi.cgi sub_41A68C command injection Affected: 9.1.0u.6279_B20210910 |
| CVE-2026-1328 | 8.8 | Jan 22 | Totolink NR1800X POST Request cstecgi.cgi setWizardCfg buffer overflow Affected: 9.1.0u.6279_B20210910 |
| CVE-2026-1327 | 8.8 | Jan 22 | Totolink NR1800X POST Request cstecgi.cgi setTracerouteCfg command injection Affected: 9.1.0u.6279_B20210910 |
| CVE-2026-1326 | 8.8 | Jan 22 | Totolink NR1800X POST Request cstecgi.cgi setWanCfg command injection Affected: 9.1.0u.6279_B20210910 |
| CVE-2025-45845 | 8.8 | May 8 | TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function Affected: 9.1.0u.6681_b20230703 |
| CVE-2025-45844 | 8.8 | May 8 | TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function Affected: 9.1.0u.6681_b20230703 |
| CVE-2025-45843 | 8.8 | May 8 | TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function Affected: 9.1.0u.6681_b20230703 |
| CVE-2025-45842 | 8.8 | May 8 | TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function Affected: 9.1.0u.6681_b20230703 |
| CVE-2024-35388 | 8.8 | May 24 | TOTOLINK NR1800X v9.1.0u.6681_B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode Affected: 9.1.0u.6681_b20230703 |
| CVE-2022-44256 | 8.8 | Nov 23 | TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function Affected: 9.3.5u.6369_b20220309 |
| CVE-2022-41520 | 8.8 | Oct 6 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the File parameter in the UploadCustomModule function Affected: 9.1.0u.6279_b20210910 |
| CVE-2022-41524 | 8.8 | Oct 6 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the week, sTime, and eTime parameters in the setParentalRules function Affected: 9.1.0u.6279_b20210910 |
| CVE-2022-41523 | 8.8 | Oct 6 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the command parameter in the setTracerouteCfg function Affected: 9.1.0u.6279_b20210910 |
| CVE-2022-41521 | 8.8 | Oct 6 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the sPort/ePort parameter in the setIpPortFilterRules function Affected: 9.1.0u.6279_b20210910 |
| CVE-2022-41517 | 8.8 | Oct 6 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow in the lang parameter in the setLanguageCfg function Affected: 9.1.0u.6279_b20210910 |
| CVE-2022-41528 | 8.8 | Oct 6 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function Affected: 9.1.0u.6279_b20210910 |
| CVE-2022-41527 | 8.8 | Oct 6 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the pppoeUser parameter in the setOpModeCfg function Affected: 9.1.0u.6279_b20210910 |
| CVE-2022-41526 | 8.8 | Oct 6 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the ip parameter in the setDiagnosisCfg function Affected: 9.1.0u.6279_b20210910 |
| CVE-2026-82597 | 7.4 | Aug 31 | TOTOLINK NR1800X cstecgi.cgi setUssd command injection Affected: 9.1.0u.6681_B20230703 |
| CVE-2025-60688 | 6.5 | Nov 13 | A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary… Affected: 9.1.0u.6681_b20230703 |
| CVE-2025-60684 | 6.5 | Nov 13 | A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary… Affected: 9.1.0u.6681_b20230703 |
| CVE-2025-60686 | 5.1 | Nov 13 | A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.cgi binaries of ToToLink routers (A720R V4.1.5cu.614_B20230630, LR1200GB… Affected: 9.1.0u.6681_b20230703 |
Showing 32