[ Vendor · 38 CVEs ]
totolink
CVEs affecting totolink published in the last 30 days, plus any totolink CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114575 | 22 Oct 2026 | CVSS 10.0 | TOTOLINK A950RGA flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file… | |
| CVE-2026-114383 | 21 Oct 2026 | CVSS 10.0 | TOTOLINK EX200A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the… | |
| CVE-2026-114382 | 21 Oct 2026 | CVSS 10.0 | TOTOLINK EX200A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of… | |
| CVE-2026-9827 | 20 Oct 2026 | CVSS 9.1 | TotolinkA arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)… | |
| CVE-2026-9869 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s)… | |
| CVE-2026-9659 | 20 Oct 2026 | CVSS 9.1 | TotolinkMultiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s)… | |
| CVE-2026-9660 | 20 Oct 2026 | CVSS 9.1 | TotolinkMultiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s)… | |
| CVE-2026-9814 | 20 Oct 2026 | CVSS 9.1 | TotolinkAn OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s)… | |
| CVE-2026-9817 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s)… | |
| CVE-2026-42020 | 20 Oct 2026 | CVSS 9.1 | TotolinkMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R… | |
| CVE-2026-42021 | 20 Oct 2026 | CVSS 9.1 | TotolinkMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R… | |
| CVE-2026-42022 | 20 Oct 2026 | CVSS 9.1 | TotolinkMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R… | |
| CVE-2026-42023 | 20 Oct 2026 | CVSS 9.1 | TotolinkMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R… | |
| CVE-2026-42024 | 20 Oct 2026 | CVSS 9.1 | TotolinkMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R… | |
| CVE-2026-42025 | 20 Oct 2026 | CVSS 9.1 | TotolinkMultiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s)… | |
| CVE-2026-42026 | 20 Oct 2026 | CVSS 9.1 | TotolinkMultiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s)… | |
| CVE-2026-28763 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s)… | |
| CVE-2026-33568 | 20 Oct 2026 | CVSS 9.1 | TotolinkA OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s)… | |
| CVE-2026-35499 | 20 Oct 2026 | CVSS 9.1 | TotolinkAn os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327… | |
| CVE-2026-40615 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s)… | |
| CVE-2026-40627 | 20 Oct 2026 | CVSS 9.1 | TotolinkAn os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R… | |
| CVE-2026-41222 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s)… | |
| CVE-2026-41223 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s)… | |
| CVE-2026-42019 | 20 Oct 2026 | CVSS 9.1 | TotolinkMultiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R… | |
| CVE-2026-10133 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A… | |
| CVE-2026-10135 | 20 Oct 2026 | CVSS 9.1 | TotolinkA OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A… | |
| CVE-2026-10136 | 20 Oct 2026 | CVSS 9.1 | TotolinkA heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s)… | |
| CVE-2026-10137 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s)… | |
| CVE-2026-10138 | 20 Oct 2026 | CVSS 9.1 | TotolinkA OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A… | |
| CVE-2026-10139 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A… | |
| CVE-2026-10141 | 20 Oct 2026 | CVSS 9.1 | TotolinkA Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A… | |
| CVE-2026-10131 | 20 Oct 2026 | CVSS 9.1 | TotolinkAn OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s)… | |
| CVE-2026-10132 | 20 Oct 2026 | CVSS 9.1 | TotolinkA stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s)… | |
| CVE-2026-105484 | 6 Oct 2026 | CVSS 10.0 | TOTOLINK X6000RA security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of the file… | |
| CVE-2026-105286 | 5 Oct 2026 | CVSS 6.3 | Totolink A3002MUA vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub_44B250 of the file /boafrm/formUploadFile of the… | |
| CVE-2026-105285 | 5 Oct 2026 | CVSS 10.0 | Totolink A3002MUA security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS… | |
| CVE-2026-105284 | 5 Oct 2026 | CVSS 10.0 | Totolink A3002MUA weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file /bin/boa of the… | |
| CVE-2026-100896 | 28 Sep 2026 | CVSS 9.9 | TOTOLINK N150RTA weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the function system of the file /boafrm/formWlSiteSurvey… |