TOTOLINK has 87 CVEs on record between 2022 and 2026. Disclosure cadence is accelerating: 54 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 42. The median CVSS is 9.1 (critical), with 59 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-121 (29) and CWE-119 (24). Most affected products: Totolink (30), A3002MU (13), a3300r_firmware (8).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.1
- Publish → KEV
- —
- Last 90 days
- 54 prev 0
Weakness classes
Products
- Totolink 30
- A3002MU 13
- a3300r_firmware 8
- A950RG 6
- a3100r_firmware 6
- a702r_firmware 5
Worst active — by depth score
CVE-2026-116504Critical· 9.9TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection67CVE-2026-114575Critical· 10.0TOTOLINK A950RG product.so UploadCustomModule command injection67CVE-2026-114383Critical· 10.0TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow67CVE-2026-114382Critical· 10.0TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow67CVE-2026-105484Critical· 10.0A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B2023011667
TOTOLINK vulnerabilities
CVEs affecting TOTOLINK, newest first. Open any entry for full detail, references, and exploit status.
87 CVEsRSS
CVE-2025-12260High· 8.8A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024
A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024. The impacted element is the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. Such manipulation of the argument enabl…
CVE-2025-12259High· 8.8A flaw has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024
A flaw has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. This manipulation of the argument recHour caus…
CVE-2025-12258High· 8.8A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024
A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. Impacted is the function setOpModeCfg of the file /cgi-bin/cstecgi.cg of the component POST Parameter Handler. The manipulation of the argument opmode results in sta…
CVE-2025-12241High· 8.8A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024
A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. This impacts the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. The manipulation of the argument lang results in s…
CVE-2025-12240High· 8.8A security vulnerability has been detected in TOTOLINK A3300R 17.0.0cu.557_B20221024
A security vulnerability has been detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to buffer overflow. It is possible to i…
CVE-2025-12239High· 8.8A weakness has been identified in TOTOLINK A3300R 17.0.0cu.557_B20221024
A weakness has been identified in TOTOLINK A3300R 17.0.0cu.557_B20221024. The impacted element is the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi. Executing manipulation can lead to buffer overflow. The attack may be performed f…
CVE-2025-11444High· 8.8A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506
A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi of the component HTTP Request Handler. Such manipulation of the argu…
CVE-2025-11005Critical· 9.8Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458_B20250708.
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458_B20250708.
CVE-2025-52905High· 7.5Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360_B20241207.
Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360_B20241207.
CVE-2025-9783High· 8.8A vulnerability was determined in TOTOLINK A702R 4.0.0-B20211108.1423
A vulnerability was determined in TOTOLINK A702R 4.0.0-B20211108.1423. This issue affects the function sub_418030 of the file /boafrm/formParentControl. Executing manipulation of the argument submit-url can lead to buffer overflow. The a…
CVE-2025-9782High· 8.8A vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423
A vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423. This vulnerability affects the function sub_4466F8 of the file /boafrm/formOneKeyAccessButton. Performing manipulation of the argument submit-url results in buffer overflo…
CVE-2025-9781High· 8.8A vulnerability has been found in TOTOLINK A702R 4.0.0-B20211108.1423
A vulnerability has been found in TOTOLINK A702R 4.0.0-B20211108.1423. This affects the function sub_4162DC of the file /boafrm/formFilter. Such manipulation of the argument ip6addr leads to buffer overflow. The attack can be launched re…
CVE-2025-9780High· 8.8A flaw has been found in TOTOLINK A702R 4.0.0-B20211108.1423
A flaw has been found in TOTOLINK A702R 4.0.0-B20211108.1423. Affected by this issue is the function sub_419BE0 of the file /boafrm/formIpQoS. This manipulation of the argument mac causes buffer overflow. The attack can be initiated remo…
CVE-2025-9779High· 8.8A vulnerability was detected in TOTOLINK A702R 4.0.0-B20211108.1423
A vulnerability was detected in TOTOLINK A702R 4.0.0-B20211108.1423. Affected by this vulnerability is the function sub_4162DC of the file /boafrm/formFilter. The manipulation of the argument ip6addr results in buffer overflow. It is pos…
CVE-2025-9577Low· 2.5A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0
A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credenti…
CVE-2025-6139Low· 3.9A vulnerability, which was classified as problematic, has been found in TOTOLINK T10 4.1.8cu.5207
A vulnerability, which was classified as problematic, has been found in TOTOLINK T10 4.1.8cu.5207. Affected by this issue is some unknown functionality of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password.…
CVE-2022-32993Critical· 9.8TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh.
TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh.
CVE-2021-42877High· 7.5TOTOLINK EX1200T V4.1.2cu.5215 contains a denial of service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the system.
TOTOLINK EX1200T V4.1.2cu.5215 contains a denial of service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the system.
CVE-2021-42875Critical· 9.8TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cste_modules/system.so to control the ipDoamin.
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cste_modules/system.so to control the ipDoamin.
CVE-2021-42872Critical· 9.8TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely execute arbitrary code.
TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely execute arbitrary code.
CVE-2022-29641High· 7.5TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the startTime and endTime parameters in the function setParentalRules
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the startTime and endTime parameters in the function setParentalRules. This vulnerability allows attackers to cause a Den…
CVE-2021-46010High· 8.8Totolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web configuration
Totolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web configuration. The SESSION_ID is predictable. An attacker can hijack a valid session and conduct further malicious operations.
CVE-2021-46009Critical· 9.8In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication
In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication. Additionally, admin configurations can be set without cookies.
CVE-2021-46008High· 8.8In totolink a3100r V5.9c.4577, the hard-coded telnet password can be discovered from official released firmware
In totolink a3100r V5.9c.4577, the hard-coded telnet password can be discovered from official released firmware. An attacker, who has connected to the Wi-Fi, can easily telnet into the target with root shell if the telnet is function tur…
CVE-2021-46007Critical· 9.8totolink a3100r V5.9c.4577 is vulnerable to os command injection
totolink a3100r V5.9c.4577 is vulnerable to os command injection. The backend of a page is executing the "ping" command, and the input field does not adequately filter special symbols. This can lead to command injection attacks.
CVE-2021-46006Medium· 6.5In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated
In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated. Using this function, an attacker can configure multiple settings without authentication.
CVE-2021-44620Critical· 9.8A Command Injection vulnerability exits in TOTOLINK A3100R <=V4.1.2cu.5050_B20200504 in adm/ntm.asp via the hosTime parameters.
A Command Injection vulnerability exits in TOTOLINK A3100R <=V4.1.2cu.5050_B20200504 in adm/ntm.asp via the hosTime parameters.