Patchfirst
Patchfirst

Vendor

totolink

56 totolink CVEs in Patchfirst. None is in of vulnerabilities exploited in the wild yet.

CVEs
56
In CISA KEV
0
Known ransomware use
0
Median days to KEV
–
from publication
Latest KEV listing
None
Watch totolink Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • Totolink In KEV: 0 CVEs: 30
  • A950RG In KEV: 0 CVEs: 5
  • X6000R In KEV: 0 CVEs: 3
  • A3002MU In KEV: 0 CVEs: 2
  • A7000R In KEV: 0 CVEs: 2
  • EX200 In KEV: 0 CVEs: 2
  • A3002R In KEV: 0 CVEs: 1
  • A720R In KEV: 0 CVEs: 1
  • LR1200GB In KEV: 0 CVEs: 1
  • LR350 In KEV: 0 CVEs: 1

Top ATT&CK techniques

What attackers do with totolink CVEs

No techniques linked yet.

No techniques to export yet.

Counts are totolink CVEs linked to the technique. Each link’s provenance is on the CVE page.

totolink CVEs

56 CVEs, by priority
  1. CVE-2026-1547Totolink A7000R cstecgi.cgi setUnloadUserData command injection
    Totolink · A7000RPublic exploitMedium · 6.3
    3.0%Top 13%
    71.9priority
  2. CVE-2025-6485TOTOLINK A3002R formWlSiteSurvey os command injection
    TOTOLINK · A3002RPublic exploitMedium · 6.3
    9.3%Top 4.6%
    68.5priority
  3. CVE-2025-14586TOTOLINK X5000R cstecgi.cgi snprintf os command injection
    TOTOLINK · X5000RPublic exploitMedium · 6.3
    2.8%Top 14%
    66.7priority
  4. CVE-2026-1623Totolink A7000R cstecgi.cgi setUpgradeFW command injection
    Totolink · A7000RPublic exploitMedium · 6.3
    2.4%Top 16%
    66.2priority
  5. CVE-2025-5504TOTOLINK X2000R formWsc command injection
    TOTOLINK · X2000RPublic exploitMedium · 6.3
    14.0%Top 3.5%
    66.2priority
  6. CVE-2025-1829TOTOLINK X18 cstecgi.cgi setMtknatCfg os command injection
    TOTOLINK · X18Public exploitMedium · 6.3
    12.4%Top 3.8%
    66.0priority
  7. CVE-2024-1781Totolink X6000R AX3000 shttpd cstecgi.cgi setWizardCfg command injection
    Totolink · X6000R AX3000Public exploitMedium · 6.3
    14.8%Top 3.3%
    66.0priority
  8. CVE-2025-8937TOTOLINK N350R formSysCmd command injection
    TOTOLINK · N350RPublic exploitMedium · 6.3
    2.1%Top 18%
    65.8priority
  9. CVE-2024-2353Totolink X6000R shttpd cstecgi.cgi setDiagnosisCfg os command injection
    Totolink · X6000RPublic exploitHigh · 8.8
    4.0%Top 9.6%
    64.2priority
  10. CVE-2025-3987TOTOLINK N150RT formWsc command injection
    TOTOLINK · N150RTPublic exploitMedium · 6.3
    11.3%Top 4%
    63.6priority
  11. CVE-2025-52907TOTOLINK X6000R Security Bypass Vulnerability
    TOTOLINK · X6000RHigh · 7.3
    0.9%Top 42%
    63.1priority
  12. CVE-2024-0297Totolink N200RE cstecgi.cgi UploadFirmwareFile os command injection
    Totolink · N200REPublic exploitHigh · 7.3
    3.8%Top 9.9%
    63.1priority
  13. CVE-2025-4270TOTOLINK A720R Config cstecgi.cgi information disclosure
    TOTOLINK · A720RPublic exploitMedium · 5.3
    14.0%Top 3.4%
    63.0priority
  14. CVE-2024-0292Totolink LR1200GB cstecgi.cgi setOpModeCfg os command injection
    Totolink · LR1200GBPublic exploitMedium · 6.3
    4.9%Top 7.9%
    62.8priority
  15. CVE-2024-9001TOTOLINK T10 cstecgi.cgi setTracerouteCfg os command injection
    TOTOLINK · T10Public exploitMedium · 6.3
    3.3%Top 11%
    62.1priority
  16. CVE-2024-7214TOTOLINK LR350 cstecgi.cgi setWanCfg command injection
    TOTOLINK · LR350Public exploitMedium · 6.3
    3.2%Top 12%
    62.0priority
  17. CVE-2026-105484A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116
    TOTOLINK · X6000RPublic exploitCritical · 10.0
    2.1%Top 18%
    30.5priority
  18. CVE-2026-114575A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104
    TOTOLINK · A950RGCritical · 10.0
    2.2%Top 17%
    25.4priority
  19. CVE-2026-116505A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104
    TOTOLINK · A950RGCritical · 9.1
    2.7%Top 14%
    25.2priority
  20. CVE-2026-116506A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104
    TOTOLINK · A950RGCritical · 9.9
    1.9%Top 21%
    24.4priority
  21. CVE-2026-116504A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104
    TOTOLINK · A950RGCritical · 9.9
    1.5%Top 25%
    23.5priority
  22. CVE-2026-9814An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s)…
    totolink · TotolinkCritical · 9.1
    1.6%Top 24%
    23.4priority
  23. CVE-2026-10138A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s)…
    totolink · TotolinkCritical · 9.1
    1.4%Top 27%
    22.9priority
  24. CVE-2026-10135A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s)…
    totolink · TotolinkCritical · 9.1
    1.4%Top 28%
    22.7priority
  25. CVE-2026-10131An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s)…
    totolink · TotolinkCritical · 9.1
    1.4%Top 28%
    22.7priority
  26. CVE-2026-35499An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R…
    totolink · TotolinkCritical · 9.1
    1.3%Top 30%
    22.3priority
  27. CVE-2026-40627An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R…
    totolink · TotolinkCritical · 9.1
    1.0%Top 36%
    21.1priority
  28. CVE-2026-33568A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s)…
    totolink · TotolinkCritical · 9.1
    1.0%Top 36%
    21.1priority
  29. CVE-2026-105284A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455
    Totolink · A3002MUCritical · 10.0
    0.8%Top 43%
    20.7priority
  30. CVE-2026-9659Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R…
    totolink · TotolinkCritical · 9.1
    0.8%Top 44%
    19.5priority
  31. CVE-2026-114382A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200
    TOTOLINK · EX200Critical · 10.0
    0.7%Top 48%
    19.3priority
  32. CVE-2026-105285A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455
    Totolink · A3002MUCritical · 10.0
    0.6%Top 49%
    19.3priority
  33. CVE-2026-114383A weakness has been identified in TOTOLINK EX200 5.2.3c.7200
    TOTOLINK · EX200Critical · 10.0
    0.7%Top 49%
    19.2priority
  34. CVE-2026-42020Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink…
    totolink · TotolinkCritical · 9.1
    0.7%Top 46%
    19.2priority
  35. CVE-2026-42019Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink…
    totolink · TotolinkCritical · 9.1
    0.7%Top 46%
    19.2priority
  36. CVE-2026-41223A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R…
    totolink · TotolinkCritical · 9.1
    0.7%Top 46%
    19.2priority
  37. CVE-2026-41222A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R…
    totolink · TotolinkCritical · 9.1
    0.7%Top 46%
    19.2priority
  38. CVE-2026-40615A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R…
    totolink · TotolinkCritical · 9.1
    0.7%Top 46%
    19.2priority
  39. CVE-2026-28763A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R…
    totolink · TotolinkCritical · 9.1
    0.7%Top 46%
    19.2priority
  40. CVE-2026-116508A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104
    TOTOLINK · A950RGCritical · 10.0
    0.6%Top 51%
    18.4priority
  41. CVE-2026-9827A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s)…
    totolink · TotolinkCritical · 9.1
    0.6%Top 50%
    18.3priority
  42. CVE-2026-10139A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s)…
    totolink · TotolinkCritical · 9.1
    0.6%Top 50%
    18.3priority
  43. CVE-2026-10137A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s)…
    totolink · TotolinkCritical · 9.1
    0.6%Top 51%
    18.0priority
  44. CVE-2026-10136A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s)…
    totolink · TotolinkCritical · 9.1
    0.6%Top 51%
    18.0priority
  45. CVE-2026-10133A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s)…
    totolink · TotolinkCritical · 9.1
    0.6%Top 51%
    18.0priority
  46. CVE-2026-10132A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s)…
    totolink · TotolinkCritical · 9.1
    0.6%Top 51%
    18.0priority
  47. CVE-2026-9869A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s)…
    totolink · TotolinkCritical · 9.1
    0.5%Top 56%
    17.0priority
  48. CVE-2026-9817A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s)…
    totolink · TotolinkCritical · 9.1
    0.5%Top 56%
    17.0priority
  49. CVE-2026-9660Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R…
    totolink · TotolinkCritical · 9.1
    0.5%Top 56%
    17.0priority
  50. CVE-2026-42026Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality…
    totolink · TotolinkCritical · 9.1
    0.5%Top 56%
    17.0priority
  51. CVE-2026-42025Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality…
    totolink · TotolinkCritical · 9.1
    0.5%Top 56%
    17.0priority
  52. CVE-2026-42024Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…
    totolink · TotolinkCritical · 9.1
    0.5%Top 56%
    17.0priority
  53. CVE-2026-42023Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…
    totolink · TotolinkCritical · 9.1
    0.5%Top 56%
    17.0priority
  54. CVE-2026-42022Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…
    totolink · TotolinkCritical · 9.1
    0.5%Top 59%
    16.5priority
  55. CVE-2026-42021Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…
    totolink · TotolinkCritical · 9.1
    0.5%Top 59%
    16.5priority
  56. CVE-2026-10141A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s)…
    totolink · TotolinkCritical · 9.1
    0.3%Top 79%
    12.4priority
↑ ↓ chooseEnter openEsc close