totolink Vulnerability Advisory Catalog

Total 1,106 security vulnerabilities recorded for totolink software and firmware.

← Back to All Vendors
CVE-2025-67186 CRITICAL
Component: a950rg_firmware

TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability in the setUrlFilterRules interface of /lib/cste_modules/firewall.so. ...

📅 2026-02-03
CVSS 9.8 Dossier →
Component: a3600r_firmware

A security flaw has been discovered in Totolink A3600R 5.9c.4959. This issue affects the function setAppEasyWizardConfig in the library /lib/cste_modu...

📅 2026-01-30
CVSS 8.8 Dossier →
CVE-2026-1623 MEDIUM
Component: a7000r_firmware

A weakness has been identified in Totolink A7000R 4.1cu.4154. Impacted is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi. This manipulatio...

📅 2026-01-29
CVSS 6.3 Dossier →
CVE-2026-1601 MEDIUM
Component: a7000r_firmware

A weakness has been identified in Totolink A7000R 4.1cu.4154. The impacted element is the function setUploadUserData of the file /cgi-bin/cstecgi.cgi....

📅 2026-01-29
CVSS 6.3 Dossier →
CVE-2026-1548 MEDIUM
Component: a7000r_firmware

A flaw has been found in Totolink A7000R 4.1cu.4154. This impacts the function CloudACMunualUpdateUserdata of the file /cgi-bin/cstecgi.cgi. This mani...

📅 2026-01-28
CVSS 6.3 Dossier →
CVE-2026-1547 MEDIUM
Component: a7000r_firmware

A vulnerability was detected in Totolink A7000R 4.1cu.4154. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipula...

📅 2026-01-28
CVSS 6.3 Dossier →
Component: nr1800x_firmware

A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. Impacted is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the ...

📅 2026-01-22
CVSS 8.8 Dossier →
CVE-2026-1327 MEDIUM
Component: nr1800x_firmware

A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. This issue affects the function setTracerouteCfg of the file /cg...

📅 2026-01-22
CVSS 6.3 Dossier →
CVE-2026-1326 MEDIUM
Component: nr1800x_firmware

A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. This vulnerability affects the function setWanCfg of the file /cgi-bin/cstec...

📅 2026-01-22
CVSS 6.3 Dossier →
Component: lr350_firmware

A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWizardCfg of the file /cgi-bin...

📅 2026-01-19
CVSS 8.8 Dossier →
Component: lr350_firmware

A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This affects the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi. Suc...

📅 2026-01-19
CVSS 8.8 Dossier →
Component: lr350_firmware

A vulnerability was determined in Totolink LR350 9.3.5u.6369_B20220309. Affected by this issue is the function setWiFiBasicCfg of the file /cgi-bin/cs...

📅 2026-01-19
CVSS 8.8 Dossier →
Component: lr350_firmware

A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. Affected by this vulnerability is the function setWiFiEasyGuestCfg of the file /cgi...

📅 2026-01-19
CVSS 8.8 Dossier →
CVE-2026-1150 MEDIUM
Component: lr350_firmware

A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. Impacted is the function setTracerouteCfg of the file /cgi-bin/cstecgi.cg...

📅 2026-01-19
CVSS 6.3 Dossier →
CVE-2026-1149 MEDIUM
Component: lr350_firmware

A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.c...

📅 2026-01-19
CVSS 6.3 Dossier →
Component: a3700r_firmware

A weakness has been identified in TOTOLINK A3700R 9.1.2u.5822_B20200513. This affects the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cg...

📅 2026-01-19
CVSS 8.8 Dossier →
CVE-2026-0731 MEDIUM
Component: wa1200-poe

A vulnerability has been found in TOTOLINK WA1200 5.9c.2914. The impacted element is an unknown function of the file cstecgi.cgi of the component HTTP...

📅 2026-01-08
CVSS 5.3 Dossier →
CVE-2026-0641 MEDIUM
Component: wa300_firmware

A security vulnerability has been detected in TOTOLINK WA300 5.2cu.7112_B20190227. This vulnerability affects the function sub_401510 of the file cste...

📅 2026-01-06
CVSS 6.3 Dossier →
CVE-2025-14964 CRITICAL
Component: t10_firmware

A vulnerability has been found in TOTOLINK T10 4.1.8cu.5083_B20200521. This affects the function sprintf of the file /cgi-bin/cstecgi.cgi. Such manipu...

📅 2025-12-19
CVSS 9.8 Dossier →
CVE-2025-55895 CRITICAL
Component: a3300r_firmware

TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control. Attac...

📅 2025-12-15
CVSS 9.1 Dossier →
Component: a3300r_firmware

TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter....

📅 2025-12-15
CVSS 6.5 Dossier →
Component: n200re_firmware

TOTOLINK N200RE V9.3.5u.6437_B20230519 is vulnerable to command Injection in setOpModeCfg via hostName....

📅 2025-12-15
CVSS 6.5 Dossier →
Component: x5000r_firmware

A vulnerability was determined in TOTOLINK X5000R 9.1.0cu.2089_B20211224. Affected by this issue is the function snprintf of the file /cgi-bin/cstecgi...

📅 2025-12-13
CVSS 6.3 Dossier →
CVE-2025-13184 CRITICAL
Component: x5000r_firmware

Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank password on factory/reset X5000R V9...

📅 2025-12-10
CVSS 9.8 Dossier →
Page 3 of 47 (1,106 Total Records)