Vendor
TOTOLINK
1,301 known vulnerabilities in products by TOTOLINK, 0 of them actively exploited (CISA KEV).
Key figures
1,301
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
645
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2026-10187 | Totolink N300RH Web Management wireless.so setWiFiBasicConfig stack-based overflow | 9.8 | |
| Critical | CVE-2025-13184 | Toto Link X5000R's (AX1800 router): security vulnerability | 9.8 | |
| Critical | CVE-2025-28137 | Totolink A810R Firmware 4.1.8cu.5241 B20210927: security vulnerability | 9.8 | |
| Critical | CVE-2025-52906 | TOTOLINK X6000R Command Injection Vulnerability | 9.8 | |
| Critical | CVE-2026-93742 | Totolink A3002MU formWsc command injection | 9.9 | |
| Critical | CVE-2025-45797 | Totolink A950RG Firmware: Buffer Overflow | 9.8 | |
| Critical | CVE-2026-105484 | TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection | 10.0 | |
| Critical | CVE-2025-45858 | TOTOLINK A3002r Firmware: Command Injection | 9.8 | |
| Critical | CVE-2023-46574 | TOTOLINK A3700r Firmware: Code Execution | 9.8 | |
| Critical | CVE-2025-55591 | TOTOLINK A3002r Firmware: Command Injection | 9.8 | |
| Critical | CVE-2026-3301 | Totolink N300RH Web Management cstecgi.cgi setWebWlanIdx os command injection | 9.8 | |
| Critical | CVE-2024-7332 | TOTOLINK CP450 Telnet Service product.ini hard-coded password | 9.8 | |
| Critical | CVE-2025-25579 | TOTOLINK A3002r Firmware: Command Injection | 9.8 | |
| Critical | CVE-2026-9436 | Totolink A8000RU Web Management cstecgi.cgi setL2tpServerCfg os command injection | 9.8 | |
| Critical | CVE-2026-9543 | Totolink N300RH Web Management cstecgi.cgi setPasswordCfg os command injection | 9.8 | |
| Critical | CVE-2026-9476 | Totolink A8000RU Web Management cstecgi.cgi setPasswordCfg os command injection | 9.8 | |
| Critical | CVE-2026-9458 | Totolink A8000RU Web Management cstecgi.cgi setWanCfg os command injection | 9.8 | |
| Critical | CVE-2026-100896 | TOTOLINK N150RT Web Management formWlSiteSurvey system os command injection | 9.9 | |
| Critical | CVE-2026-9435 | Totolink A8000RU Web Management cstecgi.cgi setQosCfg os command injection | 9.8 | |
| Critical | CVE-2026-9434 | Totolink A8000RU Web Management cstecgi.cgi setWiFiWpsCfg os command injection | 9.8 | |
| Critical | CVE-2026-9478 | Totolink A8000RU Web Management cstecgi.cgi setParentalRules os command injection | 9.8 | |
| Critical | CVE-2026-9475 | Totolink A8000RU Web Management cstecgi.cgi setIpQosRules os command injection | 9.8 | |
| Critical | CVE-2026-9457 | Totolink A8000RU Web Management cstecgi.cgi UploadFirmwareFile os command injection | 9.8 | |
| Critical | CVE-2026-9408 | Totolink A8000RU Web Management cstecgi.cgi setStaticDhcpRules os command injection | 9.8 | |
| Critical | CVE-2026-9477 | Totolink A8000RU Web Management cstecgi.cgi setAccessDeviceCfg os command injection | 9.8 |