Totolink vulnerabilities
557 CVEs and advisories name Totolink as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-1157Totolink LR350 cstecgi.cgi setWiFiEasyCfg buffer overflow
- CVE-2026-1156Totolink LR350 cstecgi.cgi setWiFiBasicCfg buffer overflow
- CVE-2026-1155Totolink LR350 cstecgi.cgi setWiFiEasyGuestCfg buffer overflow
- CVE-2026-1150Totolink LR350 POST Request cstecgi.cgi setTracerouteCfg command injection
- CVE-2026-1149Totolink LR350 POST Request cstecgi.cgi setDiagnosisCfg command injection
- CVE-2026-1143TOTOLINK A3700R cstecgi.cgi setWiFiEasyGuestCfg buffer overflow
- CVE-2026-0731TOTOLINK WA1200 HTTP Request cstecgi.cgi null pointer dereference
- CVE-2026-0641TOTOLINK WA300 cstecgi.cgi sub_401510 command injection
- CVE-2025-14964TOTOLINK T10 cstecgi.cgi sprintf stack-based overflow
- CVE-2025-14586TOTOLINK X5000R cstecgi.cgi snprintf os command injection
- CVE-2025-34319TOTOLINK N300RT <= V2.1.8-B20201030.1539 Boa formWsc RCE
- CVE-2025-12260TOTOLINK A3300R POST Parameter cstecgi.cgi setSyslogCfg stack-based overflow
- CVE-2025-12259TOTOLINK A3300R POST Parameter cstecgi.cgi setScheduleCfg stack-based overflow
- CVE-2025-12258TOTOLINK A3300R POST Parameter cstecgi.cg setOpModeCfg stack-based overflow
- CVE-2025-12241TOTOLINK A3300R POST Parameter cstecgi.cgi setLanguageCfg stack-based overflow
- CVE-2025-12240TOTOLINK A3300R cstecgi.cgi setDmzCfg buffer overflow
- CVE-2025-12239TOTOLINK A3300R cstecgi.cgi setDdnsCfg buffer overflow
- CVE-2025-11444TOTOLINK N600R HTTP Request cstecgi.cgi setWiFiBasicConfig buffer overflow
- CVE-2025-11005TOTOLINK X6000R Unauthenticated Command Injection Vulnerability
- CVE-2025-52907TOTOLINK X6000R Security Bypass Vulnerability
- CVE-2025-52906TOTOLINK X6000R Command Injection Vulnerability
- CVE-2025-52905TOTOLINK X6000R Argument Injection Vulnerability
- CVE-2025-9935TOTOLINK N600R cstecgi.cgi sub_4159F8 command injection
- CVE-2025-9934TOTOLINK X5000R cstecgi.cgi sub_410C34 command injection
- CVE-2025-9783TOTOLINK A702R formParentControl sub_418030 buffer overflow
- CVE-2025-9782TOTOLINK A702R formOneKeyAccessButton sub_4466F8 buffer overflow
- CVE-2025-9781TOTOLINK A702R formFilter sub_4162DC buffer overflow
- CVE-2025-9780TOTOLINK A702R formIpQoS sub_419BE0 buffer overflow
- CVE-2025-9779TOTOLINK A702R formFilter sub_4162DC buffer overflow
- CVE-2025-9577TOTOLINK X2000R Administrative shadow.sample default credentials