VulnSea

TOTOLINK has 87 CVEs on record between 2022 and 2026. Disclosure cadence is accelerating: 54 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 42. The median CVSS is 9.1 (critical), with 59 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-121 (29) and CWE-119 (24). Most affected products: Totolink (30), A3002MU (13), a3300r_firmware (8).

CVEs per month

Last 12 months, by publish date

111201020304050607080910
Exploited share
0% vs 1% corpus
Median CVSS
9.1
Publish → KEV
—
Last 90 days
54 prev 0

Products

  • Totolink 30
  • A3002MU 13
  • a3300r_firmware 8
  • A950RG 6
  • a3100r_firmware 6
  • a702r_firmware 5
Follow TOTOLINK:RSS feedSave a search →Embed badge ↗
87
Total CVEs
59
Critical
0
CISA KEV
0
Exploited

Worst active — by depth score

TOTOLINK vulnerabilities

CVEs affecting TOTOLINK, newest first. Open any entry for full detail, references, and exploit status.

87 CVEsRSS

CVE-2026-116507Medium· 5.3PoC
yesterday

TOTOLINK A950RG global.so getLanguageCfg information disclosure

A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so. Such manipulation of the argument token leads to information disclosure. The a…

▾ TwilightTOTOLINK · A950RGEPSS 0.40%via CVEORG
CVE-2026-116508Critical· 10.0
yesterday

TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function sub_402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument …

▾ MidnightTOTOLINK · A950RGEPSS 0.61%via CVEORG
CVE-2026-116506Critical· 9.9
yesterday

TOTOLINK A950RG firewall.so apmib_set command injection

A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been …

▾ MidnightTOTOLINK · A950RGEPSS 1.9%via CVEORG
CVE-2026-116505Critical· 9.1
yesterday

TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC addres…

▾ MidnightTOTOLINK · A950RGEPSS 2.7%via CVEORG
CVE-2026-116504Critical· 9.9PoC
yesterday

TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection

A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setCloudUpgradeFW of the file lib/cste_modules/upgrade.so of the component Cloud Upgrade. The manipulation of the argument FileName leads…

▾ AbyssalTOTOLINK · A950RGEPSS 1.5%via CVEORG
CVE-2026-114575Critical· 10.0
5d ago

TOTOLINK A950RG product.so UploadCustomModule command injection

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste_modules/product.so. Executing a manipulation of the argument FileMd5 can lead to command inje…

▾ MidnightTOTOLINK · A950RGEPSS 2.2%via CVEORG
CVE-2026-114382Critical· 10.0
6d ago

TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow

A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based bu…

▾ MidnightTOTOLINK · EX200EPSS 0.67%via CVEORG
CVE-2026-114383Critical· 10.0
6d ago

TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow

A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This manipulation of the argument macAddress causes stack-based bu…

▾ MidnightTOTOLINK · EX200EPSS 0.65%via CVEORG
CVE-2026-10139Critical· 9.1
1w ago

A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an…

▾ Midnighttotolink · TotolinkEPSS 0.62%via CVEORG
CVE-2026-10133Critical· 9.1
1w ago

A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can mak…

▾ Midnighttotolink · TotolinkEPSS 0.60%via CVEORG
CVE-2026-10132Critical· 9.1
1w ago

A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacke…

▾ Midnighttotolink · TotolinkEPSS 0.60%via CVEORG
CVE-2026-10137Critical· 9.1
1w ago

A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker…

▾ Midnighttotolink · TotolinkEPSS 0.60%via CVEORG
CVE-2026-9869Critical· 9.1
1w ago

A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attac…

▾ Midnighttotolink · TotolinkEPSS 0.51%via CVEORG
CVE-2026-10141Critical· 9.1
1w ago

A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted firmware binary can lead to arbitrary firmware update. An attacker ca…

▾ Midnighttotolink · TotolinkEPSS 0.28%via CVEORG
CVE-2026-10138Critical· 9.1
1w ago

A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can ma…

▾ Midnighttotolink · TotolinkEPSS 1.4%via CVEORG
CVE-2026-10136Critical· 9.1
1w ago

A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker …

▾ Midnighttotolink · TotolinkEPSS 0.60%via CVEORG
CVE-2026-10131Critical· 9.1
1w ago

An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker …

▾ Midnighttotolink · TotolinkEPSS 1.4%via CVEORG
CVE-2026-9827Critical· 9.1
1w ago

A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can …

▾ Midnighttotolink · TotolinkEPSS 0.63%via CVEORG
CVE-2026-33568Critical· 9.1
1w ago

A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An atta…

▾ Midnighttotolink · TotolinkEPSS 1.0%via CVEORG
CVE-2026-10135Critical· 9.1
1w ago

A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an au…

▾ Midnighttotolink · TotolinkEPSS 1.4%via CVEORG
CVE-2026-9814Critical· 9.1
1w ago

An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker…

▾ Midnighttotolink · TotolinkEPSS 1.6%via CVEORG
CVE-2026-9660Critical· 9.1
1w ago

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code exec…

▾ Midnighttotolink · TotolinkEPSS 0.51%via CVEORG
CVE-2026-9659Critical· 9.1
1w ago

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code exec…

▾ Midnighttotolink · TotolinkEPSS 0.79%via CVEORG
CVE-2026-9817Critical· 9.1
1w ago

A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attack…

▾ Midnighttotolink · TotolinkEPSS 0.51%via CVEORG
CVE-2026-42025Critical· 9.1
1w ago

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitra…

▾ Midnighttotolink · TotolinkEPSS 0.51%via CVEORG
CVE-2026-42026Critical· 9.1
1w ago

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitra…

▾ Midnighttotolink · TotolinkEPSS 0.51%via CVEORG
CVE-2026-42022Critical· 9.1
1w ago

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbi…

▾ Midnighttotolink · TotolinkEPSS 0.48%via CVEORG
CVE-2026-42021Critical· 9.1
1w ago

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbi…

▾ Midnighttotolink · TotolinkEPSS 0.48%via CVEORG
CVE-2026-42024Critical· 9.1
1w ago

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbi…

▾ Midnighttotolink · TotolinkEPSS 0.51%via CVEORG
CVE-2026-42023Critical· 9.1
1w ago

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbi…

▾ Midnighttotolink · TotolinkEPSS 0.51%via CVEORG
TOTOLINK vulnerabilities (CVEs) · VulnSea