Vendor

    TOTOLINK

    1,301 known vulnerabilities in products by TOTOLINK, 0 of them actively exploited (CISA KEV).

    Key figures

    1,301

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    645

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in TOTOLINK
    SeverityCVETitleCVSSPublished
    CriticalCVE-2026-10187

    Totolink N300RH Web Management wireless.so setWiFiBasicConfig stack-based overflow

    9.8
    CriticalCVE-2025-13184

    Toto Link X5000R's (AX1800 router): security vulnerability

    9.8
    CriticalCVE-2025-28137

    Totolink A810R Firmware 4.1.8cu.5241 B20210927: security vulnerability

    9.8
    CriticalCVE-2025-52906

    TOTOLINK X6000R Command Injection Vulnerability

    9.8
    CriticalCVE-2026-93742

    Totolink A3002MU formWsc command injection

    9.9
    CriticalCVE-2025-45797

    Totolink A950RG Firmware: Buffer Overflow

    9.8
    CriticalCVE-2026-105484

    TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection

    10.0
    CriticalCVE-2025-45858

    TOTOLINK A3002r Firmware: Command Injection

    9.8
    CriticalCVE-2023-46574

    TOTOLINK A3700r Firmware: Code Execution

    9.8
    CriticalCVE-2025-55591

    TOTOLINK A3002r Firmware: Command Injection

    9.8
    CriticalCVE-2026-3301

    Totolink N300RH Web Management cstecgi.cgi setWebWlanIdx os command injection

    9.8
    CriticalCVE-2024-7332

    TOTOLINK CP450 Telnet Service product.ini hard-coded password

    9.8
    CriticalCVE-2025-25579

    TOTOLINK A3002r Firmware: Command Injection

    9.8
    CriticalCVE-2026-9436

    Totolink A8000RU Web Management cstecgi.cgi setL2tpServerCfg os command injection

    9.8
    CriticalCVE-2026-9543

    Totolink N300RH Web Management cstecgi.cgi setPasswordCfg os command injection

    9.8
    CriticalCVE-2026-9476

    Totolink A8000RU Web Management cstecgi.cgi setPasswordCfg os command injection

    9.8
    CriticalCVE-2026-9458

    Totolink A8000RU Web Management cstecgi.cgi setWanCfg os command injection

    9.8
    CriticalCVE-2026-100896

    TOTOLINK N150RT Web Management formWlSiteSurvey system os command injection

    9.9
    CriticalCVE-2026-9435

    Totolink A8000RU Web Management cstecgi.cgi setQosCfg os command injection

    9.8
    CriticalCVE-2026-9434

    Totolink A8000RU Web Management cstecgi.cgi setWiFiWpsCfg os command injection

    9.8
    CriticalCVE-2026-9478

    Totolink A8000RU Web Management cstecgi.cgi setParentalRules os command injection

    9.8
    CriticalCVE-2026-9475

    Totolink A8000RU Web Management cstecgi.cgi setIpQosRules os command injection

    9.8
    CriticalCVE-2026-9457

    Totolink A8000RU Web Management cstecgi.cgi UploadFirmwareFile os command injection

    9.8
    CriticalCVE-2026-9408

    Totolink A8000RU Web Management cstecgi.cgi setStaticDhcpRules os command injection

    9.8
    CriticalCVE-2026-9477

    Totolink A8000RU Web Management cstecgi.cgi setAccessDeviceCfg os command injection

    9.8

    All vulnerabilities in search

    News

    Products