NR
Product
NR1800X
by Totolink · last CVE Aug 31, 2026
32
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 10High 19Medium 3Low 0
Watch

Add NR1800X to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-82616
9.9
1%
Aug 31
TOTOLINK NR1800X cstecgi.cgi setUploadSetting stack-based overflow
Affected: 9.1.0u.6681_B20230703
CVE-2026-15701
9.8
1%
Jul 14
Totolink NR1800X lighttpd formLogout.htm Form_Logout stack-based overflow
Affected: 9.1.0u.6279_B20210910
CVE-2026-7546
9.8
1%
May 1
Totolink NR1800X lighttpd find_host_ip stack-based overflow
Affected: 9.1.0u.6279_B20210910
CVE-2026-5030
9.8
3%
Mar 29
Totolink NR1800X Telnet Service cstecgi.cgi NTPSyncWithHost command injection
Affected: 9.1.0u.6279_B20210910
CVE-2025-45841
9.8
1%
May 8
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function
Affected: 9.1.0u.6681_b20230703
CVE-2023-7220
9.8
1%
Jan 9
A vulnerability was found in Totolink NR1800X 9.1.0u.6279_B20210910 and classified as critical
Affected: 9.1.0u.6279_b20210910
CVE-2023-36340
9.8
1%
Oct 16
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth
Affected: 9.1.0u.6279_b20210910
CVE-2022-41525
9.8
2%
Oct 6
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the OpModeCfg function at /cgi-bin/cstecgi.cgi
Affected: 9.1.0u.6279_b20210910
CVE-2022-41522
9.8
1%
Oct 6
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an unauthenticated stack overflow via the "main" function
Affected: 9.1.0u.6279_b20210910
CVE-2022-41518
9.8
2%
Oct 6
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi
Affected: 9.1.0u.6279_b20210910
Showing 10