Totolink vulnerabilities
557 CVEs and advisories name Totolink as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-124060TOTOLINK CA300-PoE cstecgi.cgi UploadCustomModule buffer overflow
- CVE-2026-124059TOTOLINK CA300-PoE cstecgi.cgi setWiFiWdsAddConfig buffer overflow
- CVE-2026-124058TOTOLINK CA300-PoE cstecgi.cgi setWiFiRepeaterConfig buffer overflow
- CVE-2026-124057TOTOLINK CA300-PoE cstecgi.cgi setWiFiMultipleConfig buffer overflow
- CVE-2026-123961TOTOLINK CA300-PoE cstecgi.cgi setWiFiBasicConfig buffer overflow
- CVE-2026-123960TOTOLINK CA300-PoE cstecgi.cgi setWanConfig buffer overflow
- CVE-2026-123959TOTOLINK CA300-PoE cstecgi.cgi setLanguageCfg buffer overflow
- CVE-2026-123958TOTOLINK CA300-PoE cstecgi.cgi setLanConfig buffer overflow
- CVE-2026-123957TOTOLINK CA300-PoE cstecgi.cgi setIpQosRules buffer overflow
- CVE-2026-121600TOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflow
- CVE-2026-121599TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow
- CVE-2026-121598TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow
- CVE-2026-121597TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflow
- CVE-2026-116508TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow
- CVE-2026-116507TOTOLINK A950RG global.so getLanguageCfg information disclosure
- CVE-2026-116506TOTOLINK A950RG firewall.so apmib_set command injection
- CVE-2026-116505TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection
- CVE-2026-116504TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection
- CVE-2026-114575TOTOLINK A950RG product.so UploadCustomModule command injection
- CVE-2026-114383TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow
- CVE-2026-114382TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow
- CVE-2026-35499An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250
- CVE-2026-40627An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B202
- CVE-2026-28763A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R
- CVE-2026-41223A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-G
- CVE-2026-33568A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.
- CVE-2026-41222A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-
- CVE-2026-40615A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X20
- CVE-2026-42020Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-G
- CVE-2026-42019Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-G