Login Request a demo
NR
Product
NR1800X
by Totolink · last CVE Aug 31, 2026
32
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities32In the news0Timeline
Severity mix
Critical 10High 19Medium 3Low 0
Severity
All severities32Critical10High19Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add NR1800X to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-7548
8.8
1%
May 1
Totolink NR1800X cstecgi.cgi sub_41A68C command injection
Affected: 9.1.0u.6279_B20210910
CVE-2026-1328
8.8
1%
Jan 22
Totolink NR1800X POST Request cstecgi.cgi setWizardCfg buffer overflow
Affected: 9.1.0u.6279_B20210910
CVE-2026-1327
8.8
3%
Jan 22
Totolink NR1800X POST Request cstecgi.cgi setTracerouteCfg command injection
Affected: 9.1.0u.6279_B20210910
CVE-2026-1326
8.8
3%
Jan 22
Totolink NR1800X POST Request cstecgi.cgi setWanCfg command injection
Affected: 9.1.0u.6279_B20210910
CVE-2025-45842
8.8
1%
May 8
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function
Affected: 9.1.0u.6681_b20230703
CVE-2025-45843
8.8
1%
May 8
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function
Affected: 9.1.0u.6681_b20230703
CVE-2025-45844
8.8
1%
May 8
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function
Affected: 9.1.0u.6681_b20230703
CVE-2025-45845
8.8
1%
May 8
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function
Affected: 9.1.0u.6681_b20230703
CVE-2024-35388
8.8
3%
May 24
TOTOLINK NR1800X v9.1.0u.6681_B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode
Affected: 9.1.0u.6681_b20230703
CVE-2022-44256
8.8
2%
Nov 23
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function
Affected: 9.3.5u.6369_b20220309
CVE-2022-41521
8.8
1%
Oct 6
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the sPort/ePort parameter in the setIpPortFilterRules function
Affected: 9.1.0u.6279_b20210910
CVE-2022-41520
8.8
1%
Oct 6
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the File parameter in the UploadCustomModule function
Affected: 9.1.0u.6279_b20210910
CVE-2022-41526
8.8
1%
Oct 6
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the ip parameter in the setDiagnosisCfg function
Affected: 9.1.0u.6279_b20210910
CVE-2022-41524
8.8
1%
Oct 6
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the week, sTime, and eTime parameters in the setParentalRules function
Affected: 9.1.0u.6279_b20210910
CVE-2022-41523
8.8
1%
Oct 6
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the command parameter in the setTracerouteCfg function
Affected: 9.1.0u.6279_b20210910
CVE-2022-41517
8.8
1%
Oct 6
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow in the lang parameter in the setLanguageCfg function
Affected: 9.1.0u.6279_b20210910
CVE-2022-41528
8.8
1%
Oct 6
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function
Affected: 9.1.0u.6279_b20210910
CVE-2022-41527
8.8
1%
Oct 6
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the pppoeUser parameter in the setOpModeCfg function
Affected: 9.1.0u.6279_b20210910
CVE-2026-82597
7.4
2%
Aug 31
TOTOLINK NR1800X cstecgi.cgi setUssd command injection
Affected: 9.1.0u.6681_B20230703
Showing 19