NR
Product
NR1800X
32
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 10High 19Medium 3Low 0
Watch
Add NR1800X to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-82616 | 9.9 | Aug 31 | TOTOLINK NR1800X cstecgi.cgi setUploadSetting stack-based overflow Affected: 9.1.0u.6681_B20230703 |
| CVE-2026-15701 | 9.8 | Jul 14 | Totolink NR1800X lighttpd formLogout.htm Form_Logout stack-based overflow Affected: 9.1.0u.6279_B20210910 |
| CVE-2026-7546 | 9.8 | May 1 | Totolink NR1800X lighttpd find_host_ip stack-based overflow Affected: 9.1.0u.6279_B20210910 |
| CVE-2026-5030 | 9.8 | Mar 29 | Totolink NR1800X Telnet Service cstecgi.cgi NTPSyncWithHost command injection Affected: 9.1.0u.6279_B20210910 |
| CVE-2025-45841 | 9.8 | May 8 | TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function Affected: 9.1.0u.6681_b20230703 |
| CVE-2023-7220 | 9.8 | Jan 9 | A vulnerability was found in Totolink NR1800X 9.1.0u.6279_B20210910 and classified as critical Affected: 9.1.0u.6279_b20210910 |
| CVE-2023-36340 | 9.8 | Oct 16 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth Affected: 9.1.0u.6279_b20210910 |
| CVE-2022-41525 | 9.8 | Oct 6 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the OpModeCfg function at /cgi-bin/cstecgi.cgi Affected: 9.1.0u.6279_b20210910 |
| CVE-2022-41522 | 9.8 | Oct 6 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an unauthenticated stack overflow via the "main" function Affected: 9.1.0u.6279_b20210910 |
| CVE-2022-41518 | 9.8 | Oct 6 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi Affected: 9.1.0u.6279_b20210910 |
Showing 10
