{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: totolink vulnerabilities","home_page_url":"https://patchfirst.co/vendor/totolink/","feed_url":"https://patchfirst.co/feed/vendor/totolink.json","description":"New and newly exploited totolink CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-116505","url":"https://patchfirst.co/cve/CVE-2026-116505/","title":"CVE-2026-116505: A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104","content_text":"TOTOLINK · A950RG. Not in CISA KEV. EPSS 2.7% (higher than 86.1% of CVEs). CVSS 9.1 CRITICAL. Priority 25.2 of 100.","summary":"A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104","date_published":"2026-10-26T00:00:00.000Z","date_modified":"2026-10-31T02:17:32.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.2,"kev":null,"epss":{"score":0.02741,"percentile":0.86149},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"TOTOLINK","product":"A950RG","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-116506","url":"https://patchfirst.co/cve/CVE-2026-116506/","title":"CVE-2026-116506: A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104","content_text":"TOTOLINK · A950RG. Not in CISA KEV. EPSS 1.9% (higher than 79.4% of CVEs). CVSS 9.9 CRITICAL. Priority 24.4 of 100.","summary":"A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104","date_published":"2026-10-26T00:00:00.000Z","date_modified":"2026-10-27T14:52:13.000Z","tags":[],"_patchfirst":{"reason":"published","priority":24.4,"kev":null,"epss":{"score":0.0188,"percentile":0.79424},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"TOTOLINK","product":"A950RG","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-116504","url":"https://patchfirst.co/cve/CVE-2026-116504/","title":"CVE-2026-116504: A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104","content_text":"TOTOLINK · A950RG. Not in CISA KEV. EPSS 1.5% (higher than 75% of CVEs). CVSS 9.9 CRITICAL. Priority 23.5 of 100.","summary":"A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104","date_published":"2026-10-26T00:00:00.000Z","date_modified":"2026-10-27T15:16:34.000Z","tags":[],"_patchfirst":{"reason":"published","priority":23.5,"kev":null,"epss":{"score":0.01547,"percentile":0.7498},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"TOTOLINK","product":"A950RG","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-116508","url":"https://patchfirst.co/cve/CVE-2026-116508/","title":"CVE-2026-116508: A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104","content_text":"TOTOLINK · A950RG. Not in CISA KEV. EPSS 0.6% (higher than 49.1% of CVEs). CVSS 10.0 CRITICAL. Priority 18.4 of 100.","summary":"A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104","date_published":"2026-10-26T00:00:00.000Z","date_modified":"2026-10-31T02:17:32.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.4,"kev":null,"epss":{"score":0.00609,"percentile":0.49109},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"TOTOLINK","product":"A950RG","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-114575","url":"https://patchfirst.co/cve/CVE-2026-114575/","title":"CVE-2026-114575: A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104","content_text":"TOTOLINK · A950RG. Not in CISA KEV. EPSS 2.2% (higher than 82.6% of CVEs). CVSS 10.0 CRITICAL. Priority 25.4 of 100.","summary":"A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-28T19:17:28.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.4,"kev":null,"epss":{"score":0.0221,"percentile":0.82574},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"TOTOLINK","product":"A950RG","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-114382","url":"https://patchfirst.co/cve/CVE-2026-114382/","title":"CVE-2026-114382: A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200","content_text":"TOTOLINK · EX200. Not in CISA KEV. EPSS 0.7% (higher than 51.8% of CVEs). CVSS 10.0 CRITICAL. Priority 19.3 of 100.","summary":"A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200","date_published":"2026-10-21T00:00:00.000Z","date_modified":"2026-10-28T02:17:06.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.3,"kev":null,"epss":{"score":0.00667,"percentile":0.51839},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"TOTOLINK","product":"EX200","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-114383","url":"https://patchfirst.co/cve/CVE-2026-114383/","title":"CVE-2026-114383: A weakness has been identified in TOTOLINK EX200 5.2.3c.7200","content_text":"TOTOLINK · EX200. Not in CISA KEV. EPSS 0.7% (higher than 51.3% of CVEs). CVSS 10.0 CRITICAL. Priority 19.2 of 100.","summary":"A weakness has been identified in TOTOLINK EX200 5.2.3c.7200","date_published":"2026-10-21T00:00:00.000Z","date_modified":"2026-10-28T19:17:27.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.2,"kev":null,"epss":{"score":0.00653,"percentile":0.5127},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"TOTOLINK","product":"EX200","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-9814","url":"https://patchfirst.co/cve/CVE-2026-9814/","title":"CVE-2026-9814: An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s)…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 1.6% (higher than 75.8% of CVEs). CVSS 9.1 CRITICAL. Priority 23.4 of 100.","summary":"An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s)…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:19:50.000Z","tags":[],"_patchfirst":{"reason":"published","priority":23.4,"kev":null,"epss":{"score":0.01602,"percentile":0.75789},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-10138","url":"https://patchfirst.co/cve/CVE-2026-10138/","title":"CVE-2026-10138: A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s)…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 1.4% (higher than 73.3% of CVEs). CVSS 9.1 CRITICAL. Priority 22.9 of 100.","summary":"A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s)…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:17:42.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.9,"kev":null,"epss":{"score":0.01448,"percentile":0.73297},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-10135","url":"https://patchfirst.co/cve/CVE-2026-10135/","title":"CVE-2026-10135: A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s)…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 1.4% (higher than 72.2% of CVEs). CVSS 9.1 CRITICAL. Priority 22.7 of 100.","summary":"A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s)…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:17:41.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.7,"kev":null,"epss":{"score":0.01386,"percentile":0.72214},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-10131","url":"https://patchfirst.co/cve/CVE-2026-10131/","title":"CVE-2026-10131: An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s)…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 1.4% (higher than 72.2% of CVEs). CVSS 9.1 CRITICAL. Priority 22.7 of 100.","summary":"An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s)…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:17:41.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.7,"kev":null,"epss":{"score":0.01386,"percentile":0.72214},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-35499","url":"https://patchfirst.co/cve/CVE-2026-35499/","title":"CVE-2026-35499: An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 1.3% (higher than 70.1% of CVEs). CVSS 9.1 CRITICAL. Priority 22.3 of 100.","summary":"An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:17:43.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.3,"kev":null,"epss":{"score":0.01286,"percentile":0.70123},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-40627","url":"https://patchfirst.co/cve/CVE-2026-40627/","title":"CVE-2026-40627: An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 1.0% (higher than 64.1% of CVEs). CVSS 9.1 CRITICAL. Priority 21.1 of 100.","summary":"An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-28T20:17:25.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.1,"kev":null,"epss":{"score":0.01043,"percentile":0.64064},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-33568","url":"https://patchfirst.co/cve/CVE-2026-33568/","title":"CVE-2026-33568: A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s)…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 1.0% (higher than 64.1% of CVEs). CVSS 9.1 CRITICAL. Priority 21.1 of 100.","summary":"A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s)…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-28T20:17:23.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.1,"kev":null,"epss":{"score":0.01043,"percentile":0.64064},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-9659","url":"https://patchfirst.co/cve/CVE-2026-9659/","title":"CVE-2026-9659: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.8% (higher than 56.2% of CVEs). CVSS 9.1 CRITICAL. Priority 19.5 of 100.","summary":"Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-28T20:18:53.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.5,"kev":null,"epss":{"score":0.00791,"percentile":0.56249},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-42020","url":"https://patchfirst.co/cve/CVE-2026-42020/","title":"CVE-2026-42020: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.7% (higher than 54.5% of CVEs). CVSS 9.1 CRITICAL. Priority 19.2 of 100.","summary":"Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-28T20:17:25.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.2,"kev":null,"epss":{"score":0.00737,"percentile":0.54459},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-42019","url":"https://patchfirst.co/cve/CVE-2026-42019/","title":"CVE-2026-42019: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.7% (higher than 54.5% of CVEs). CVSS 9.1 CRITICAL. Priority 19.2 of 100.","summary":"Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-28T20:17:25.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.2,"kev":null,"epss":{"score":0.00737,"percentile":0.54458},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-41223","url":"https://patchfirst.co/cve/CVE-2026-41223/","title":"CVE-2026-41223: A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.7% (higher than 54.5% of CVEs). CVSS 9.1 CRITICAL. Priority 19.2 of 100.","summary":"A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-28T20:17:25.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.2,"kev":null,"epss":{"score":0.00737,"percentile":0.54458},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-41222","url":"https://patchfirst.co/cve/CVE-2026-41222/","title":"CVE-2026-41222: A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.7% (higher than 54.5% of CVEs). CVSS 9.1 CRITICAL. Priority 19.2 of 100.","summary":"A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-28T20:17:25.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.2,"kev":null,"epss":{"score":0.00737,"percentile":0.54458},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-40615","url":"https://patchfirst.co/cve/CVE-2026-40615/","title":"CVE-2026-40615: A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.7% (higher than 54.5% of CVEs). CVSS 9.1 CRITICAL. Priority 19.2 of 100.","summary":"A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-28T20:17:24.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.2,"kev":null,"epss":{"score":0.00737,"percentile":0.54458},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-28763","url":"https://patchfirst.co/cve/CVE-2026-28763/","title":"CVE-2026-28763: A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.7% (higher than 54.5% of CVEs). CVSS 9.1 CRITICAL. Priority 19.2 of 100.","summary":"A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-28T20:17:23.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.2,"kev":null,"epss":{"score":0.00737,"percentile":0.54457},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-9827","url":"https://patchfirst.co/cve/CVE-2026-9827/","title":"CVE-2026-9827: A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s)…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.6% (higher than 50.3% of CVEs). CVSS 9.1 CRITICAL. Priority 18.3 of 100.","summary":"A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s)…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:19:51.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.3,"kev":null,"epss":{"score":0.00633,"percentile":0.50293},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-10139","url":"https://patchfirst.co/cve/CVE-2026-10139/","title":"CVE-2026-10139: A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s)…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.6% (higher than 49.9% of CVEs). CVSS 9.1 CRITICAL. Priority 18.3 of 100.","summary":"A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s)…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:17:42.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.3,"kev":null,"epss":{"score":0.00624,"percentile":0.49902},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-10137","url":"https://patchfirst.co/cve/CVE-2026-10137/","title":"CVE-2026-10137: A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s)…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.6% (higher than 48.6% of CVEs). CVSS 9.1 CRITICAL. Priority 18.0 of 100.","summary":"A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s)…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:17:41.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18,"kev":null,"epss":{"score":0.00598,"percentile":0.48565},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-10136","url":"https://patchfirst.co/cve/CVE-2026-10136/","title":"CVE-2026-10136: A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s)…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.6% (higher than 48.6% of CVEs). CVSS 9.1 CRITICAL. Priority 18.0 of 100.","summary":"A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s)…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:17:41.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18,"kev":null,"epss":{"score":0.00598,"percentile":0.48566},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-10133","url":"https://patchfirst.co/cve/CVE-2026-10133/","title":"CVE-2026-10133: A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s)…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.6% (higher than 48.6% of CVEs). CVSS 9.1 CRITICAL. Priority 18.0 of 100.","summary":"A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s)…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:17:41.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18,"kev":null,"epss":{"score":0.00598,"percentile":0.48566},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-10132","url":"https://patchfirst.co/cve/CVE-2026-10132/","title":"CVE-2026-10132: A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s)…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.6% (higher than 48.6% of CVEs). CVSS 9.1 CRITICAL. Priority 18.0 of 100.","summary":"A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s)…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:17:41.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18,"kev":null,"epss":{"score":0.00598,"percentile":0.48566},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-9869","url":"https://patchfirst.co/cve/CVE-2026-9869/","title":"CVE-2026-9869: A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s)…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.5% (higher than 43.7% of CVEs). CVSS 9.1 CRITICAL. Priority 17.0 of 100.","summary":"A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s)…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:19:51.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17,"kev":null,"epss":{"score":0.00512,"percentile":0.43664},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-9817","url":"https://patchfirst.co/cve/CVE-2026-9817/","title":"CVE-2026-9817: A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s)…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.5% (higher than 43.7% of CVEs). CVSS 9.1 CRITICAL. Priority 17.0 of 100.","summary":"A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s)…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:19:50.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17,"kev":null,"epss":{"score":0.00512,"percentile":0.43664},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-9660","url":"https://patchfirst.co/cve/CVE-2026-9660/","title":"CVE-2026-9660: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.5% (higher than 43.7% of CVEs). CVSS 9.1 CRITICAL. Priority 17.0 of 100.","summary":"Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:19:50.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17,"kev":null,"epss":{"score":0.00512,"percentile":0.43665},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-42026","url":"https://patchfirst.co/cve/CVE-2026-42026/","title":"CVE-2026-42026: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.5% (higher than 43.7% of CVEs). CVSS 9.1 CRITICAL. Priority 17.0 of 100.","summary":"Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:17:44.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17,"kev":null,"epss":{"score":0.00512,"percentile":0.43665},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-42025","url":"https://patchfirst.co/cve/CVE-2026-42025/","title":"CVE-2026-42025: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.5% (higher than 43.7% of CVEs). CVSS 9.1 CRITICAL. Priority 17.0 of 100.","summary":"Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:17:44.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17,"kev":null,"epss":{"score":0.00512,"percentile":0.43664},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-42024","url":"https://patchfirst.co/cve/CVE-2026-42024/","title":"CVE-2026-42024: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.5% (higher than 43.7% of CVEs). CVSS 9.1 CRITICAL. Priority 17.0 of 100.","summary":"Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:17:43.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17,"kev":null,"epss":{"score":0.00512,"percentile":0.43663},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-42023","url":"https://patchfirst.co/cve/CVE-2026-42023/","title":"CVE-2026-42023: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.5% (higher than 43.7% of CVEs). CVSS 9.1 CRITICAL. Priority 17.0 of 100.","summary":"Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:17:43.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17,"kev":null,"epss":{"score":0.00512,"percentile":0.43664},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-42022","url":"https://patchfirst.co/cve/CVE-2026-42022/","title":"CVE-2026-42022: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.5% (higher than 41.2% of CVEs). CVSS 9.1 CRITICAL. Priority 16.5 of 100.","summary":"Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:17:43.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.5,"kev":null,"epss":{"score":0.00477,"percentile":0.41209},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-42021","url":"https://patchfirst.co/cve/CVE-2026-42021/","title":"CVE-2026-42021: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.5% (higher than 41.2% of CVEs). CVSS 9.1 CRITICAL. Priority 16.5 of 100.","summary":"Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:17:43.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.5,"kev":null,"epss":{"score":0.00477,"percentile":0.41209},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-10141","url":"https://patchfirst.co/cve/CVE-2026-10141/","title":"CVE-2026-10141: A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s)…","content_text":"totolink · Totolink. Not in CISA KEV. EPSS 0.3% (higher than 20.6% of CVEs). CVSS 9.1 CRITICAL. Priority 12.4 of 100.","summary":"A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s)…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-23T23:17:42.000Z","tags":[],"_patchfirst":{"reason":"published","priority":12.4,"kev":null,"epss":{"score":0.00281,"percentile":0.20646},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"totolink","product":"Totolink","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-105484","url":"https://patchfirst.co/cve/CVE-2026-105484/","title":"CVE-2026-105484: A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116","content_text":"TOTOLINK · X6000R. Not in CISA KEV. EPSS 2.1% (higher than 81.9% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 30.5 of 100.","summary":"A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-06T15:04:52.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":30.5,"kev":null,"epss":{"score":0.02128,"percentile":0.81919},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"TOTOLINK","product":"X6000R","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-105284","url":"https://patchfirst.co/cve/CVE-2026-105284/","title":"CVE-2026-105284: A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455","content_text":"Totolink · A3002MU. Not in CISA KEV. EPSS 0.8% (higher than 57.5% of CVEs). CVSS 10.0 CRITICAL. Priority 20.7 of 100.","summary":"A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455","date_published":"2026-10-05T00:00:00.000Z","date_modified":"2026-10-06T15:04:52.000Z","tags":[],"_patchfirst":{"reason":"published","priority":20.7,"kev":null,"epss":{"score":0.00828,"percentile":0.57485},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Totolink","product":"A3002MU","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-105285","url":"https://patchfirst.co/cve/CVE-2026-105285/","title":"CVE-2026-105285: A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455","content_text":"Totolink · A3002MU. Not in CISA KEV. EPSS 0.6% (higher than 50.8% of CVEs). CVSS 10.0 CRITICAL. Priority 19.3 of 100.","summary":"A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455","date_published":"2026-10-05T00:00:00.000Z","date_modified":"2026-10-06T15:04:52.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.3,"kev":null,"epss":{"score":0.00644,"percentile":0.50831},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Totolink","product":"A3002MU","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-1623","url":"https://patchfirst.co/cve/CVE-2026-1623/","title":"CVE-2026-1623: Totolink A7000R cstecgi.cgi setUpgradeFW command injection","content_text":"Totolink · A7000R. Not in CISA KEV. EPSS 2.4% (higher than 83.9% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 66.2 of 100.","summary":"Totolink A7000R cstecgi.cgi setUpgradeFW command injection","date_published":"2026-01-29T00:00:00.000Z","date_modified":"2026-02-23T09:07:06.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":66.2,"kev":null,"epss":{"score":0.02388,"percentile":0.83929},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Totolink","product":"A7000R","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-1547","url":"https://patchfirst.co/cve/CVE-2026-1547/","title":"CVE-2026-1547: Totolink A7000R cstecgi.cgi setUnloadUserData command injection","content_text":"Totolink · A7000R. Not in CISA KEV. EPSS 3.0% (higher than 87.5% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 71.9 of 100.","summary":"Totolink A7000R cstecgi.cgi setUnloadUserData command injection","date_published":"2026-01-28T00:00:00.000Z","date_modified":"2026-02-23T09:02:20.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":71.9,"kev":null,"epss":{"score":0.03033,"percentile":0.87479},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Totolink","product":"A7000R","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-14586","url":"https://patchfirst.co/cve/CVE-2025-14586/","title":"CVE-2025-14586: TOTOLINK X5000R cstecgi.cgi snprintf os command injection","content_text":"TOTOLINK · X5000R. Not in CISA KEV. EPSS 2.8% (higher than 86.2% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 66.7 of 100.","summary":"TOTOLINK X5000R cstecgi.cgi snprintf os command injection","date_published":"2025-12-13T00:00:00.000Z","date_modified":"2026-02-24T05:48:28.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":66.7,"kev":null,"epss":{"score":0.02758,"percentile":0.86236},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"TOTOLINK","product":"X5000R","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-52907","url":"https://patchfirst.co/cve/CVE-2025-52907/","title":"CVE-2025-52907: TOTOLINK X6000R Security Bypass Vulnerability","content_text":"TOTOLINK · X6000R. Not in CISA KEV. EPSS 0.9% (higher than 58.3% of CVEs). CVSS 7.3 HIGH. Priority 63.1 of 100.","summary":"TOTOLINK X6000R Security Bypass Vulnerability","date_published":"2025-09-24T00:00:00.000Z","date_modified":"2025-09-24T18:46:23.000Z","tags":[],"_patchfirst":{"reason":"published","priority":63.1,"kev":null,"epss":{"score":0.00854,"percentile":0.58262},"cvss":{"score":7.3,"severity":"HIGH","version":"4.0"},"vendor":"TOTOLINK","product":"X6000R","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-8937","url":"https://patchfirst.co/cve/CVE-2025-8937/","title":"CVE-2025-8937: TOTOLINK N350R formSysCmd command injection","content_text":"TOTOLINK · N350R. Not in CISA KEV. EPSS 2.1% (higher than 82% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 65.8 of 100.","summary":"TOTOLINK N350R formSysCmd command injection","date_published":"2025-08-14T00:00:00.000Z","date_modified":"2025-08-15T21:35:41.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":65.8,"kev":null,"epss":{"score":0.02132,"percentile":0.8196},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"TOTOLINK","product":"N350R","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-6485","url":"https://patchfirst.co/cve/CVE-2025-6485/","title":"CVE-2025-6485: TOTOLINK A3002R formWlSiteSurvey os command injection","content_text":"TOTOLINK · A3002R. Not in CISA KEV. EPSS 9.3% (higher than 95.4% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 68.5 of 100.","summary":"TOTOLINK A3002R formWlSiteSurvey os command injection","date_published":"2025-06-22T00:00:00.000Z","date_modified":"2025-06-23T13:28:25.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":68.5,"kev":null,"epss":{"score":0.09338,"percentile":0.95378},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"TOTOLINK","product":"A3002R","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-5504","url":"https://patchfirst.co/cve/CVE-2025-5504/","title":"CVE-2025-5504: TOTOLINK X2000R formWsc command injection","content_text":"TOTOLINK · X2000R. Not in CISA KEV. EPSS 14.0% (higher than 96.5% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 66.2 of 100.","summary":"TOTOLINK X2000R formWsc command injection","date_published":"2025-06-03T00:00:00.000Z","date_modified":"2025-06-03T14:48:04.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":66.2,"kev":null,"epss":{"score":0.13953,"percentile":0.96542},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"TOTOLINK","product":"X2000R","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-4270","url":"https://patchfirst.co/cve/CVE-2025-4270/","title":"CVE-2025-4270: TOTOLINK A720R Config cstecgi.cgi information disclosure","content_text":"TOTOLINK · A720R. Not in CISA KEV. EPSS 14.0% (higher than 96.6% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. Priority 63.0 of 100.","summary":"TOTOLINK A720R Config cstecgi.cgi information disclosure","date_published":"2025-05-05T00:00:00.000Z","date_modified":"2025-05-05T13:20:24.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":63,"kev":null,"epss":{"score":0.14034,"percentile":0.96553},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"TOTOLINK","product":"A720R","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-3987","url":"https://patchfirst.co/cve/CVE-2025-3987/","title":"CVE-2025-3987: TOTOLINK N150RT formWsc command injection","content_text":"TOTOLINK · N150RT. Not in CISA KEV. EPSS 11.3% (higher than 96% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 63.6 of 100.","summary":"TOTOLINK N150RT formWsc command injection","date_published":"2025-04-27T00:00:00.000Z","date_modified":"2025-04-28T17:28:10.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":63.6,"kev":null,"epss":{"score":0.11278,"percentile":0.95965},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"TOTOLINK","product":"N150RT","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-1829","url":"https://patchfirst.co/cve/CVE-2025-1829/","title":"CVE-2025-1829: TOTOLINK X18 cstecgi.cgi setMtknatCfg os command injection","content_text":"TOTOLINK · X18. Not in CISA KEV. EPSS 12.4% (higher than 96.2% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 66.0 of 100.","summary":"TOTOLINK X18 cstecgi.cgi setMtknatCfg os command injection","date_published":"2025-03-02T00:00:00.000Z","date_modified":"2025-03-03T18:05:43.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":66,"kev":null,"epss":{"score":0.12376,"percentile":0.96198},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"TOTOLINK","product":"X18","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}}]}