Browse CVEs

CRITICAL 9.8 CVE-2026-5030 A vulnerability has been found in Totolink NR1800X 9.1.0u.6279_B20210910. This issue affects the function NTPSyncWithHost of the file /cgi-bin/cstecg… Nr1800x Firmware Mitigation only Fix from $2,3002026-03-29 CRITICAL 9.8 CVE-2026-5020 A vulnerability was detected in Totolink A3600R 4.1.2cu.5182_B20201102. Affected by this issue is the function setNoticeCfg of the file /cgi-bin/cste… A3600r Firmware Mitigation only Fix from $2,3002026-03-29 HIGH 8.8 CVE-2026-4976 A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWiFiGuestCfg of the file /cgi-bin/cstec… Lr350 Firmware No fix yet Fix from $1,9502026-03-27 HIGH 8.8 CVE-2026-4611 A flaw has been found in TOTOLINK X6000R 9.4.0cu.1360_B20241207/9.4.0cu.1498_B20250826. Affected by this issue is the function setLanCfg of the file … X6000r Firmware Mitigation only Fix from $1,9502026-03-23 CRITICAL 9.8 CVE-2026-4497 A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227. Affected by this issue is the function recvUpgradeNewFw of the file /cgi-bin/c… Wa300 Firmware Mitigation only Fix from $2,3002026-03-20 CRITICAL 9.8 CVE-2026-3696 A vulnerability was found in Totolink N300RH 6..1c.1353_B20190305. The affected element is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi… N300rh Firmware Mitigation only Fix from $2,3002026-03-08 CRITICAL 9.8 CVE-2026-3301 A security flaw has been discovered in Totolink N300RH 6.1c.1353_B20190305. Affected by this vulnerability is the function setWebWlanIdx of the file … N300rh Firmware Mitigation only Fix from $2,3002026-02-27 HIGH 7.5 CVE-2025-67445 TOTOLINK X5000R V9.1.0cu.2415_B20250515 contains a denial-of-service vulnerability in /cgi-bin/cstecgi.cgi. The CGI reads the CONTENT_LENGTH environm… X5000r Firmware No fix yet Fix from $1,9502026-02-24 CRITICAL 9.8 CVE-2025-70327 TOTOLINK X5000R v9.1.0cu_2415_B20250515 contains an argument injection vulnerability in the setDiagnosisCfg handler of the /usr/sbin/lighttpd executa… X5000r Firmware Mitigation only Fix from $2,3002026-02-23 HIGH 8.8 CVE-2025-70328 TOTOLINK X6000R v9.4.0cu.1498_B20250826 contains an OS command injection vulnerability in the NTPSyncWithHost handler of the /usr/sbin/shttpd executa… X6000r Firmware No fix yet Fix from $1,9502026-02-23 HIGH 8.0 CVE-2025-70329 TOTOLink X5000R v9.1.0cu_2415_B20250515 contains an OS command injection vulnerability in the setIptvCfg handler of the /usr/sbin/lighttpd executable… X5000r Firmware No fix yet Fix from $1,9502026-02-23 HIGH 8.8 CVE-2026-26731 TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the routernamer`parameter in the formDnsv6 functio… A3002ru Firmware No fix yet Fix from $1,9502026-02-17 HIGH 8.8 CVE-2026-26732 TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the vpnUser or vpnPassword` parameters in the form… A3002ru Firmware No fix yet Fix from $1,9502026-02-17 HIGH 8.8 CVE-2026-2167 A vulnerability was detected in Totolink WA300 5.2cu.7112_B20190227. The impacted element is the function setAPNetwork of the file /cgi-bin/cstecgi.c… Wa300 Firmware No fix yet Fix from $1,9502026-02-08 CRITICAL 9.8 CVE-2025-67186 TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability in the setUrlFilterRules interface of /lib/cste_modules/firewall.so.… A950rg Firmware Mitigation only Fix from $2,3002026-02-03 CRITICAL 9.8 CVE-2025-67187 A stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The flaw exists in the setIpQosRules interface… A950rg Firmware Mitigation only Fix from $2,3002026-02-03 CRITICAL 9.8 CVE-2025-67188 A buffer overflow vulnerability exists in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The issue resides in the setRadvdCfg interface of the /lib/cste_mo… A950rg Firmware Mitigation only Fix from $2,3002026-02-03 MEDIUM 6.5 CVE-2025-67189 A buffer overflow vulnerability exists in the setParentalRules interface of TOTOLINK A950RG V4.1.2cu.5204_B20210112. The urlKeyword parameter is not … A950rg Firmware No fix yet Fix from $1,6002026-02-03 HIGH 8.8 CVE-2026-1686 A security flaw has been discovered in Totolink A3600R 5.9c.4959. This issue affects the function setAppEasyWizardConfig in the library /lib/cste_mod… A3600r Firmware No fix yet Fix from $1,9502026-01-30 MEDIUM 6.3 CVE-2026-1623 A weakness has been identified in Totolink A7000R 4.1cu.4154. Impacted is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi. This manipulati… A7000r Firmware No fix yet Fix from $1,6002026-01-29 MEDIUM 6.3 CVE-2026-1601 A weakness has been identified in Totolink A7000R 4.1cu.4154. The impacted element is the function setUploadUserData of the file /cgi-bin/cstecgi.cgi… A7000r Firmware No fix yet Fix from $1,6002026-01-29 HIGH 8.8 CVE-2026-1548 A flaw has been found in Totolink A7000R 4.1cu.4154. This impacts the function CloudACMunualUpdateUserdata of the file /cgi-bin/cstecgi.cgi. This man… A7000r Firmware No fix yet Fix from $1,9502026-01-28 CRITICAL 9.8 CVE-2026-1547 A vulnerability was detected in Totolink A7000R 4.1cu.4154. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipul… A7000r Firmware Mitigation only Fix from $2,3002026-01-28 HIGH 8.8 CVE-2026-1328 A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. Impacted is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the… Nr1800x Firmware No fix yet Fix from $1,9502026-01-22 HIGH 8.8 CVE-2026-1326 A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. This vulnerability affects the function setWanCfg of the file /cgi-bin/cste… Nr1800x Firmware No fix yet Fix from $1,9502026-01-22 HIGH 8.8 CVE-2026-1327 A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. This issue affects the function setTracerouteCfg of the file /c… Nr1800x Firmware No fix yet Fix from $1,9502026-01-22 HIGH 8.8 CVE-2026-1158 A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function setWizardCfg of the file /cgi-bi… Lr350 Firmware No fix yet Fix from $1,9502026-01-19 HIGH 8.8 CVE-2026-1157 A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This affects the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi. Su… Lr350 Firmware No fix yet Fix from $1,9502026-01-19 HIGH 8.8 CVE-2026-1156 A vulnerability was determined in Totolink LR350 9.3.5u.6369_B20220309. Affected by this issue is the function setWiFiBasicCfg of the file /cgi-bin/c… Lr350 Firmware No fix yet Fix from $1,9502026-01-19 HIGH 8.8 CVE-2026-1155 A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. Affected by this vulnerability is the function setWiFiEasyGuestCfg of the file /cg… Lr350 Firmware No fix yet Fix from $1,9502026-01-19