TO
Vendor
Totolink
1,550
CVEs
0
On KEV
42
New 30D
Products
TO9.1
Totolink
totolink
30 CVEs0 on KEV30 new
A910.0
A950RG
TOTOLINK
39 CVEs0 on KEV6 new
A310.0
A3002MU
Totolink
14 CVEs0 on KEV3 new
EX10.0
EX200
TOTOLINK
22 CVEs0 on KEV2 new
X610.0
X6000R
TOTOLINK
58 CVEs0 on KEV1 new
A79.8
A7100RU
Totolink
77 CVEs0 on KEV0 new
X59.8
X5000R
Totolink
73 CVEs0 on KEV0 new
A39.8
A3300R
Totolink
65 CVEs0 on KEV0 new
AF9.8
A3002r Firmware
Totolink
61 CVEs0 on KEV0 new
A89.8
A8000RU
Totolink
52 CVEs0 on KEV0 new
AF9.8
A3002ru Firmware
Totolink
49 CVEs0 on KEV0 new
AF9.8
A3100r Firmware
Totolink
47 CVEs0 on KEV0 new
XF9.8
X2000r Firmware
Totolink
45 CVEs0 on KEV0 new
AF9.8
A3700r Firmware
Totolink
43 CVEs0 on KEV0 new
N610.0
N600R
TOTOLINK
41 CVEs0 on KEV0 new
TF9.8
T6 Firmware
Totolink
39 CVEs0 on KEV0 new
EF9.8
Ex1200t Firmware
Totolink
37 CVEs0 on KEV0 new
A79.8
A7000R
TOTOLINK
36 CVEs0 on KEV0 new
LR9.8
LR350
Totolink
36 CVEs0 on KEV0 new
A89.8
A800R
Totolink
33 CVEs0 on KEV0 new
AF9.8
A702r Firmware
Totolink
32 CVEs0 on KEV0 new
NR9.9
NR1800X
Totolink
32 CVEs0 on KEV0 new
A79.8
A720R
TOTOLINK
29 CVEs0 on KEV0 new
AF9.8
A810r Firmware
Totolink
29 CVEs0 on KEV0 new
EF9.8
Ex1800t Firmware
Totolink
28 CVEs0 on KEV0 new
TF9.8
T8 Firmware
Totolink
26 CVEs0 on KEV0 new
AF9.8
A3000ru Firmware
Totolink
25 CVEs0 on KEV0 new
A39.8
A3600R
Totolink
25 CVEs0 on KEV0 new
AF9.8
A830r Firmware
Totolink
25 CVEs0 on KEV0 new
XF9.8
X15 Firmware
Totolink
25 CVEs0 on KEV0 new
CF9.8
Ca300-poe Firmware
Totolink
24 CVEs0 on KEV0 new
TF9.8
T10 Firmware
Totolink
22 CVEs0 on KEV0 new
CP9.9
CP450
TOTOLINK
21 CVEs0 on KEV0 new
NF9.8
N200re Firmware
Totolink
21 CVEs0 on KEV0 new
NF9.8
N350rt Firmware
Totolink
21 CVEs0 on KEV0 new
N19.9
N150RT
TOTOLINK
20 CVEs0 on KEV0 new
LF9.8
Lr1200gb Firmware
Totolink
19 CVEs0 on KEV0 new
N39.8
N300RH
Totolink
15 CVEs0 on KEV0 new
XF9.8
X18 Firmware
Totolink
14 CVEs0 on KEV0 new
AF9.8
A6000r Firmware
Totolink
13 CVEs0 on KEV0 new
CF9.8
Cp900 Firmware
Totolink
13 CVEs0 on KEV0 new
N39.8
N300RT
Totolink
13 CVEs0 on KEV0 new
EF9.8
Ex1200l Firmware
Totolink
11 CVEs0 on KEV0 new
CF6.5
Ca600-poe Firmware
Totolink
10 CVEs0 on KEV0 new
AT9.8
AC1200 T8
TOTOLINK
9 CVEs0 on KEV0 new
CA6.3
CA750-PoE
Totolink
9 CVEs0 on KEV0 new
AF9.8
A860r Firmware
Totolink
8 CVEs0 on KEV0 new
AT9.8
Ac1200 T8 Firmware
Totolink
8 CVEs0 on KEV0 new
CF9.8
Cp900l Firmware
Totolink
8 CVEs0 on KEV0 new
WA9.8
WA300
Totolink
8 CVEs0 on KEV0 new
CF9.8
Cp300 Firmware
Totolink
7 CVEs0 on KEV0 new
EV9.8
Ex300 V2 Firmware
Totolink
6 CVEs0 on KEV0 new
NF9.8
N100re Firmware
Totolink
5 CVEs0 on KEV0 new
NV9.8
N200re V5 Firmware
Totolink
4 CVEs0 on KEV0 new
NF9.8
N301rt Firmware
Totolink
4 CVEs0 on KEV0 new
NF9.8
N302r Firmware
Totolink
4 CVEs0 on KEV0 new
TV9.8
T10 V2 Firmware
Totolink
4 CVEs0 on KEV0 new
AT8.8
AC1200 T10
TOTOLINK
3 CVEs0 on KEV0 new
AT8.8
Ac1200 T10 Firmware
Totolink
3 CVEs0 on KEV0 new
EX9.4
EX1200L
Totolink
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116508 New | A9 A950RG TOTOLINK | 10.0 | Oct 26 | TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow |
| CVE-2026-116507 New | A9 A950RG TOTOLINK | 5.3 | Oct 26 | TOTOLINK A950RG global.so getLanguageCfg information disclosure |
| CVE-2026-116506 New | A9 A950RG TOTOLINK | 9.9 | Oct 26 | TOTOLINK A950RG firewall.so apmib_set command injection |
| CVE-2026-116505 New | A9 A950RG TOTOLINK | 9.1 | Oct 26 | TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection |
| CVE-2026-116504 New | A9 A950RG TOTOLINK | 9.9 | Oct 26 | TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection |
| CVE-2026-114575 New | A9 A950RG TOTOLINK | 10.0 | Oct 22 | TOTOLINK A950RG product.so UploadCustomModule command injection |
| CVE-2026-114383 New | EX EX200 TOTOLINK | 10.0 | Oct 21 | TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow |
| CVE-2026-114382 New | EX EX200 TOTOLINK | 10.0 | Oct 21 | TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow |
| CVE-2026-35499 | TO Totolink totolink | 9.1 | Oct 20 | An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 |
| CVE-2026-40627 | TO Totolink totolink | 9.1 | Oct 20 | An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 |
| CVE-2026-28763 | TO Totolink totolink | 9.1 | Oct 20 | A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-41223 | TO Totolink totolink | 9.1 | Oct 20 | A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-33568 | TO Totolink totolink | 9.1 | Oct 20 | A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-41222 | TO Totolink totolink | 9.1 | Oct 20 | A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-40615 | TO Totolink totolink | 9.1 | Oct 20 | A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-42020 | TO Totolink totolink | 9.1 | Oct 20 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 |
| CVE-2026-42019 | TO Totolink totolink | 9.1 | Oct 20 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 |
| CVE-2026-42024 | TO Totolink totolink | 9.1 | Oct 20 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R… |
| CVE-2026-42023 | TO Totolink totolink | 9.1 | Oct 20 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R… |
| CVE-2026-42022 | TO Totolink totolink | 9.1 | Oct 20 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R… |
| CVE-2026-42021 | TO Totolink totolink | 9.1 | Oct 20 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R… |
| CVE-2026-42026 | TO Totolink totolink | 9.1 | Oct 20 | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s):… |
| CVE-2026-42025 | TO Totolink totolink | 9.1 | Oct 20 | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s):… |
| CVE-2026-9660 | TO Totolink totolink | 9.1 | Oct 20 | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-9659 | TO Totolink totolink | 9.1 | Oct 20 | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-9814 | TO Totolink totolink | 9.1 | Oct 20 | An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-9817 | TO Totolink totolink | 9.1 | Oct 20 | A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-9827 | TO Totolink totolink | 9.1 | Oct 20 | A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-9869 | TO Totolink totolink | 9.1 | Oct 20 | A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-10131 | TO Totolink totolink | 9.1 | Oct 20 | An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-10132 | TO Totolink totolink | 9.1 | Oct 20 | A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-10133 | TO Totolink totolink | 9.1 | Oct 20 | A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-10135 | TO Totolink totolink | 9.1 | Oct 20 | A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-10136 | TO Totolink totolink | 9.1 | Oct 20 | A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-10137 | TO Totolink totolink | 9.1 | Oct 20 | A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-10138 | TO Totolink totolink | 9.1 | Oct 20 | A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-10139 | TO Totolink totolink | 9.1 | Oct 20 | A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-10141 | TO Totolink totolink | 9.1 | Oct 20 | A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327) |
| CVE-2026-105484 | X6 X6000R TOTOLINK | 10.0 | Oct 6 | TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection |
| CVE-2026-105286 | A3 A3002MU Totolink | 6.3 | Oct 5 | Totolink A3002MU File Upload formUploadFile sub_44B250 path traversal |
| CVE-2026-105285 | A3 A3002MU Totolink | 10.0 | Oct 5 | Totolink A3002MU QoS Rule formIpQoS stack-based overflow |
| CVE-2026-105284 | A3 A3002MU Totolink | 10.0 | Oct 5 | Totolink A3002MU Authentication Check boa sub_40FCFC improper authorization |
| CVE-2026-100896 | N1 N150RT TOTOLINK | 9.9 | Sep 28 | TOTOLINK N150RT Web Management formWlSiteSurvey system os command injection |
| CVE-2026-93742 | A3 A3002MU Totolink | 9.9 | Sep 19 | Totolink A3002MU formWsc command injection |
| CVE-2026-93741 | A3 A3002MU Totolink | 10.0 | Sep 19 | Totolink A3002MU formWlWds buffer overflow |
| CVE-2026-93740 | A3 A3002MU Totolink | 10.0 | Sep 18 | Totolink A3002MU formWlEncrypt buffer overflow |
| CVE-2026-93739 | A3 A3002MU Totolink | 9.9 | Sep 18 | Totolink A3002MU formWlAc buffer overflow |
| CVE-2026-93738 | A3 A3002MU Totolink | 9.9 | Sep 18 | Totolink A3002MU formSchedule buffer overflow |
| CVE-2026-91853 | X5 X5000R TOTOLINK | 7.4 | Sep 15 | TOTOLINK X5000R Export Ovpn cstecgi.cgi exportOvpn os command injection |
| CVE-2026-90608 | A3 A3002MU Totolink | 9.9 | Sep 14 | Totolink A3002MU boa formPortFw buffer overflow |
| CVE-2026-90607 | A3 A3002MU Totolink | 9.9 | Sep 14 | Totolink A3002MU boa formNewSchedule buffer overflow |
| CVE-2026-90606 | A3 A3002MU Totolink | 9.9 | Sep 13 | Totolink A3002MU boa formIpv6Setup buffer overflow |
| CVE-2026-90605 | A3 A3002MU Totolink | 9.9 | Sep 13 | Totolink A3002MU boa formFilter buffer overflow |
| CVE-2026-90604 | A3 A3002MU Totolink | 3.5 | Sep 13 | Totolink A3002MU Anchor Tag cross site scripting |
| CVE-2026-85031 | CP CP450 TOTOLINK | 9.9 | Sep 3 | TOTOLINK CP450 cstecgi.cgi buffer overflow |
| CVE-2026-82616 | NR NR1800X TOTOLINK | 9.9 | Aug 31 | TOTOLINK NR1800X cstecgi.cgi setUploadSetting stack-based overflow |
| CVE-2026-82597 | NR NR1800X TOTOLINK | 7.4 | Aug 31 | TOTOLINK NR1800X cstecgi.cgi setUssd command injection |
| CVE-2026-82555 | N6 N600R TOTOLINK | 3.7 | Aug 30 | TOTOLINK N600R Authentication cstecgi.cgi loginAuth random values |
| CVE-2026-82539 | A7 A720R TOTOLINK | 9.1 | Aug 30 | TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption |
| CVE-2026-79912 | N6 N600R TOTOLINK | 8.3 | Aug 25 | TOTOLINK N600R cstecgi.cgi getCurrentTime command injection |