Vulnerability index

Browse CVEs

1,082 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Lr350 Firmware HIGH 8.8
CVE-2026-1155

A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. Affected by this vulnerability is the function setWiFiEasyGuestCfg of the file /cg…

No fix yet
Fix from $1,950 2026-01-19
Lr350 Firmware HIGH 8.8
CVE-2026-1150

A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. Impacted is the function setTracerouteCfg of the file /cgi-bin/cstecgi.c…

No fix yet
Fix from $1,950 2026-01-19
Lr350 Firmware HIGH 8.8
CVE-2026-1149

A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.…

No fix yet
Fix from $1,950 2026-01-19
A3700r Firmware HIGH 8.8
CVE-2026-1143

A weakness has been identified in TOTOLINK A3700R 9.1.2u.5822_B20200513. This affects the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.c…

No fix yet
Fix from $1,950 2026-01-19
Wa1200 Poe HIGH 7.5
CVE-2026-0731

A vulnerability has been found in TOTOLINK WA1200 5.9c.2914. The impacted element is an unknown function of the file cstecgi.cgi of the component HTT…

No fix yet
Fix from $1,950 2026-01-08
Wa300 Firmware HIGH 8.8
CVE-2026-0641

A security vulnerability has been detected in TOTOLINK WA300 5.2cu.7112_B20190227. This vulnerability affects the function sub_401510 of the file cst…

No fix yet
Fix from $1,950 2026-01-06
T10 Firmware CRITICAL 9.8
CVE-2025-14964

A vulnerability has been found in TOTOLINK T10 4.1.8cu.5083_B20200521. This affects the function sprintf of the file /cgi-bin/cstecgi.cgi. Such manip…

Mitigation only
Fix from $2,300 2025-12-19
A3300r Firmware CRITICAL 9.1
CVE-2025-55895

TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control. Atta…

No fix yet
Fix from $2,300 2025-12-15
N200re Firmware MEDIUM 6.5
CVE-2025-55893

TOTOLINK N200RE V9.3.5u.6437_B20230519 is vulnerable to command Injection in setOpModeCfg via hostName.

No fix yet
Fix from $1,600 2025-12-15
A3300r Firmware MEDIUM 6.5
CVE-2025-55901

TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter.

No fix yet
Fix from $1,600 2025-12-15
X5000r Firmware CRITICAL 9.8
CVE-2025-14586

A vulnerability was determined in TOTOLINK X5000R 9.1.0cu.2089_B20211224. Affected by this issue is the function snprintf of the file /cgi-bin/cstecg…

Mitigation only
Fix from $2,300 2025-12-13
X5000r Firmware CRITICAL 9.8
CVE-2025-13184EPSS 11%

Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank password on factory/reset X5000R V…

Mitigation only
Fix from $2,300 2025-12-10
A950rg Firmware MEDIUM 6.5
CVE-2025-60699

A buffer overflow vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `global.so` binary. The `getSaveCon…

No fix yet
Fix from $1,600 2025-11-13
A950rg Firmware MEDIUM 6.5
CVE-2025-60702

A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `system.so` binary. The `setDiagn…

No fix yet
Fix from $1,600 2025-11-13
A720r Firmware MEDIUM 6.5
CVE-2025-60682

A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the cloudupdate_check binary, specifical…

No fix yet
Fix from $1,600 2025-11-13
A720r Firmware MEDIUM 6.5
CVE-2025-60683

A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary, specifically in the …

No fix yet
Fix from $1,600 2025-11-13
Lr1200gb Firmware MEDIUM 6.5
CVE-2025-60684

A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware w…

No fix yet
Fix from $1,600 2025-11-13
Lr1200gb Firmware MEDIUM 6.5
CVE-2025-60687EPSS 7%

An unauthenticated command injection vulnerability exists in the ToToLink LR1200GB Router firmware V9.1.0u.6619_B20230130 within the cstecgi.cgi bina…

No fix yet
Fix from $1,600 2025-11-13
Lr1200gb Firmware MEDIUM 6.5
CVE-2025-60688

A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware w…

No fix yet
Fix from $1,600 2025-11-13
A720r Firmware MEDIUM 5.1
CVE-2025-60685

A stack buffer overflow exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary (sub_401EE0 function). The bina…

No fix yet
Fix from $1,600 2025-11-13
A720r Firmware MEDIUM 5.1
CVE-2025-60686

A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.cgi binaries of ToToLink routers (A720R V4.1.5cu.614_B202306…

No fix yet
Fix from $1,600 2025-11-13
A7000r Firmware HIGH 7.5
CVE-2025-63153

TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode function. This vulnerability…

No fix yet
Fix from $1,950 2025-11-10
A7000r Firmware HIGH 7.5
CVE-2025-63154

TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the addEffect parameter of the urldecode function. This vulnerab…

No fix yet
Fix from $1,950 2025-11-10
A7000r Firmware HIGH 7.5
CVE-2025-63459

Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_421CF0 function. This vulnerabi…

No fix yet
Fix from $1,950 2025-10-31
Lr350 Firmware HIGH 7.5
CVE-2025-63465

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_422880 function. This vulnerabilit…

No fix yet
Fix from $1,950 2025-10-31
A7000r Firmware HIGH 7.5
CVE-2025-63460

Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_4222E0 function. This vulnerabi…

No fix yet
Fix from $1,950 2025-10-31
A7000r Firmware HIGH 7.5
CVE-2025-63461

Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function. This vulnerabil…

No fix yet
Fix from $1,950 2025-10-31
A7000r Firmware HIGH 7.5
CVE-2025-63462

Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub_421A04 function. This vulnerab…

No fix yet
Fix from $1,950 2025-10-31
Lr350 Firmware HIGH 7.5
CVE-2025-63463

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub_4232EC function. This vulnerabi…

No fix yet
Fix from $1,950 2025-10-31
Lr350 Firmware HIGH 7.5
CVE-2025-63464

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_42396C function. This vulnerabilit…

No fix yet
Fix from $1,950 2025-10-31