totolink has 91 CVEs on record between 2022 and 2026. Disclosure cadence is accelerating: 58 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 42. The median CVSS is 9.1 (critical), with 63 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-121 (33) and CWE-119 (28). Most affected products: Totolink (30), A3002MU (13), A950RG (10).
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.1
- Publish → KEV
- —
- Last 90 days
- 58 prev 0
Weakness classes
Products
- Totolink 30
- A3002MU 13
- A950RG 10
- a3300r_firmware 8
- a3100r_firmware 6
- a702r_firmware 5
91
Total CVEs
63
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-121598Critical· 9.9TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow67CVE-2026-116508Critical· 10.0TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow67CVE-2026-116506Critical· 9.9TOTOLINK A950RG firewall.so apmib_set command injection67CVE-2026-116504Critical· 9.9TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection67CVE-2026-114575Critical· 10.0TOTOLINK A950RG product.so UploadCustomModule command injection67
totolink vulnerabilities
CVEs affecting totolink, newest first. Open any entry for full detail, references, and exploit status.
91 CVEsRSS