Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
MEDIUM 5.3
CVE-2025-3664
A vulnerability, which was classified as critical, was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Affected is the function setWiFiEasyGuestCfg o…
A3700r Firmware
No fix yet
CRITICAL 9.8
CVE-2025-22900
Totolink N600R v4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the setWanConfig function.
N600r Firmware
No fix yet
CRITICAL 9.8
CVE-2025-28137EPSS 14%
The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function throu…
A810r Firmware
No fix yet
MEDIUM 6.5
CVE-2025-28136
TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi.
A800r Firmware
Mitigation only
CRITICAL 9.8
CVE-2025-3249
A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000. Affected by this vulnerability is the function apcli_cancel…
A6000r Firmware
No fix yet
CRITICAL 9.8
CVE-2025-29064
An issue in TOTOLINK x18 v.9.1.0cu.2024_B20220329 allows a remote attacker to execute arbitrary code via the sub_410E54 function of the cstecgi.cgi.
X18 Firmware
Mitigation only
CRITICAL 9.8
CVE-2025-25579EPSS 10%
TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr.
A3002r Firmware
No fix yet
CRITICAL 9.8
CVE-2025-28256
An issue in TOTOLINK A3100R V4.1.2cu.5247_B20211129 allows a remote attacker to execute arbitrary code via the setWebWlanIdx of the file /lib/cste_mo…
A3100r Firmware
No fix yet
CRITICAL 9.8
CVE-2025-28138
The TOTOLINK A800R V4.1.2cu.5137_B20200730 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function throu…
A800r Firmware
No fix yet
HIGH 7.5
CVE-2025-28135
TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi.
A810r Firmware
No fix yet
CRITICAL 9.8
CVE-2025-2097EPSS 7%
A vulnerability, which was classified as critical, has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This issue affects the function setRptW…
Ex1800t Firmware
No fix yet
CRITICAL 9.8
CVE-2025-2095
A vulnerability classified as critical has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This affects the function setDmzCfg of the file /cg…
Ex1800t Firmware
No fix yet
CRITICAL 9.8
CVE-2025-2096
A vulnerability classified as critical was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affects the function setRebootScheCfg…
Ex1800t Firmware
No fix yet
CRITICAL 9.8
CVE-2025-2094EPSS 13%
A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. It has been rated as critical. Affected by this issue is the function setWiFiEx…
Ex1800t Firmware
No fix yet
CRITICAL 9.8
CVE-2025-1852
A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112_B20220316 and classified as critical. This vulnerability affects the function loginAu…
Ex1800t Firmware
Mitigation only
HIGH 8.8
CVE-2025-1829EPSS 12%
A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been declared as critical. This vulnerability affects the function setMtknat…
X18 Firmware
No fix yet
HIGH 8.0
CVE-2025-25610
TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the st…
A3002r Firmware
Mitigation only
HIGH 8.0
CVE-2025-25635
TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pp…
A3002r Firmware
No fix yet
HIGH 8.0
CVE-2025-25609
TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the st…
A3002r Firmware
Mitigation only
MEDIUM 6.5
CVE-2025-25604
Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to command injection via the vif_disable function in mtkwifi.lua.
X5000r Firmware
No fix yet
MEDIUM 6.5
CVE-2025-25605
Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to command injection via the apcli_wps_gen_pincode function in mtkwifi.lua.
X5000r Firmware
No fix yet
HIGH 8.8
CVE-2025-1340EPSS 17%
A vulnerability classified as critical has been found in TOTOLINK X18 9.1.0cu.2024_B20220329. Affected is the function setPasswordCfg of the file /cg…
X18 Firmware
Mitigation only
HIGH 8.8
CVE-2025-1339
A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been rated as critical. This issue affects the function setL2tpdConfig of th…
X18 Firmware
Mitigation only
MEDIUM 5.1
CVE-2025-25524
Buffer overflow vulnerability in TOTOLink X6000R routers V9.4.0cu.652_B20230116 due to the lack of length verification, which is related to the addit…
X6000r Firmware
Mitigation only
HIGH 8.1
CVE-2024-57036
TOTOLINK A810R V4.1.2cu.5032_B20200407 was found to contain a command insertion vulnerability in downloadFile.cgi main function. This vulnerability a…
A810r Firmware
No fix yet
HIGH 8.8
CVE-2024-57022
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "sHour" parameter in setWiFiScheduleC…
X5000r Firmware
No fix yet
MEDIUM 6.8
CVE-2024-57023
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "week" parameter in setWiFiScheduleCf…
X5000r Firmware
No fix yet
MEDIUM 6.8
CVE-2024-57024
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "eMinute" parameter in setWiFiSchedul…
X5000r Firmware
No fix yet
MEDIUM 6.8
CVE-2024-57025
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setWiFiScheduleCf…
X5000r Firmware
No fix yet
HIGH 8.8
CVE-2024-57011
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "minute" parameters in setScheduleCfg.
X5000r Firmware
No fix yet