T10 vulnerabilities | LiveThreat CVE Feed

Product

T10

by TOTOLINK · last CVE Dec 19, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities22 In the news0 Timeline

Severity mix

Critical 10High 11Medium 0Low 1

Severity

All severities22 Critical10 High11 Medium0 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add T10 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-14964	9.8	1%	Dec 19	TOTOLINK T10 cstecgi.cgi sprintf stack-based overflow Affected: 4.1.8cu.5083_B20200521
CVE-2025-9533	9.8	12%	Aug 27	TOTOLINK T10 formLoginAuth.htm improper authentication Affected: 4.1.8cu.5241_b20210927
CVE-2025-44655	9.8	0%	Jul 21	In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in the vsftpd.conf Affected: 5.9
CVE-2025-4496	9.8	1%	May 10	A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927 Affected: 4.1.8cu.5241_b20210927
CVE-2024-8162	9.8	2%	Aug 26	A vulnerability classified as critical has been found in TOTOLINK T10 AC1200 4.1.8cu.5207 Affected: 4.1.8cu.5207
CVE-2022-25137	9.8	2%	Feb 19	A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware… Affected: v4.1.8cu.5207_b20210320
CVE-2022-25136	9.8	2%	Feb 19	A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware… Affected: v4.1.8cu.5207_b20210320
CVE-2022-25132	9.8	3%	Feb 19	A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary… Affected: v4.1.8cu.5207_b20210320
CVE-2022-25131	9.8	2%	Feb 19	A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware… Affected: v4.1.8cu.5207_b20210320
CVE-2022-25130	9.8	2%	Feb 19	A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware… Affected: v4.1.8cu.5207_b20210320
CVE-2025-6138	8.8	1%	Jun 16	A vulnerability classified as critical was found in TOTOLINK T10 4.1.8cu.5207 Affected: 4.1.8cu.5207
CVE-2025-6137	8.8	1%	Jun 16	A vulnerability classified as critical has been found in TOTOLINK T10 4.1.8cu.5207 Affected: 4.1.8cu.5207_b20210320
CVE-2025-5905	8.8	12%	Jun 10	A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 Affected: 4.1.8cu.5207
CVE-2025-5904	8.8	11%	Jun 10	A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 Affected: 4.1.8cu.5207
CVE-2025-5903	8.8	11%	Jun 10	A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 Affected: 4.1.8cu.5207
CVE-2025-5902	8.8	6%	Jun 9	A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 and classified as critical Affected: 4.1.8cu.5207
CVE-2025-5901	8.8	6%	Jun 9	A vulnerability has been found in TOTOLINK T10 4.1.8cu.5207 and classified as critical Affected: 4.1.8cu.5207
CVE-2024-9001	8.8	3%	Sep 19	A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 Affected: 4.1.8cu.5207
CVE-2024-8577	8.8	1%	Sep 8	TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setStaticDhcpRules buffer overflow Affected: 4.1.8cu.5207
CVE-2024-8576	8.8	1%	Sep 8	TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setIpPortFilterRules buffer overflow Affected: 4.1.8cu.5207
CVE-2024-8573	8.8	1%	Sep 8	TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setParentalRules buffer overflow Affected: 4.1.8cu.5207
CVE-2025-6139	3.9	0%	Jun 16	A vulnerability, which was classified as problematic, has been found in TOTOLINK T10 4.1.8cu.5207 Affected: 4.1.8cu.5207_b20210320