TO
Product
Totolink
by totolink · last CVE Oct 20, 2026
30
CVEs
0
On KEV
9.1
Max CVSS
30
New 30D
Severity mix
Critical 30High 0Medium 0Low 0
Watch

Add Totolink to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-35499
9.1
1%
Oct 20
An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-40627
9.1
1%
Oct 20
An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-28763
9.1
1%
Oct 20
A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-41223
9.1
1%
Oct 20
A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-33568
9.1
1%
Oct 20
A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-41222
9.1
1%
Oct 20
A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-40615
9.1
1%
Oct 20
A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-42020
9.1
1%
Oct 20
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-42019
9.1
1%
Oct 20
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-42024
9.1
1%
Oct 20
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-42023
9.1
1%
Oct 20
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-42022
9.1
0%
Oct 20
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-42021
9.1
0%
Oct 20
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-42026
9.1
1%
Oct 20
Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s):…
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-42025
9.1
1%
Oct 20
Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s):…
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-9660
9.1
1%
Oct 20
Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-9659
9.1
1%
Oct 20
Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-9814
9.1
2%
Oct 20
An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-9817
9.1
1%
Oct 20
A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-9827
9.1
1%
Oct 20
A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-9869
9.1
1%
Oct 20
A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-10131
9.1
1%
Oct 20
An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-10132
9.1
1%
Oct 20
A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-10133
9.1
1%
Oct 20
A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-10135
9.1
1%
Oct 20
A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-10136
9.1
1%
Oct 20
A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-10137
9.1
1%
Oct 20
A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-10138
9.1
1%
Oct 20
A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-10139
9.1
1%
Oct 20
A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
CVE-2026-10141
9.1
0%
Oct 20
A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)
Affected: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327
Showing 30