Skip to content
OpenAdvisories

Vendor

Toto Link

558 known vulnerabilities.

Products

A8000RU 50 A7100RU 42 Totolink 30 A3002RU 27 A702R 27 A3002R 25 X15 25 A3600R 20 EX1200T 19 A3300R 17 T6 16 N300RH 15 N150RT 15 N200RE 14 LR1200GB 14 AC1200 T8 14 A3002MU 14 CA300-PoE 14 A3700R 12 T10 12 A950RG 12 A800R 11 EX1200L 11 NR1800X 10 X6000R 10 LR350 9 CA750-PoE 9 N350RT 9 X2000R 9 WA300 8 EX1800T 8 N600R 7 A720R 7 A7000R 7 X5000R 6 EX200 6 A3000RU 5 CP450 5 A3100R 4 X18 4
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-105484 Public exploit

    TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection

    A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of the argument file_name …

    Toto Link X6000R
  • Critical 9.1
    CVE-2026-82539 Public exploit

    TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption

    A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack…

    Toto Link A720R
  • Critical 9.8
    CVE-2026-10187 Public exploit

    Totolink N300RH Web Management wireless.so setWiFiBasicConfig stack-based overflow

    A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Management Interface. Performing a manipulation of the argument KeyStr results in stack…

    Toto Link N300RH
  • High 8.8
    CVE-2025-6916 Public exploit

    TOTOLINK T6 formLoginAuth.htm Form_Login missing authentication

    A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015. This affects the function Form_Login of the file /formLoginAuth.htm. The manipulation of the argument authCode/goURL leads to missing authentication. The attack…

    Toto Link T6
  • Medium 5.3
    CVE-2024-10654 Public exploit

    TOTOLINK LR350 formLoginAuth.htm authorization

    A vulnerability has been found in TOTOLINK LR350 up to 9.3.5u.6369 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /formLoginAuth.htm. The manipulation of the argument authCode with the input 1 leads to autho…

    Toto Link LR350
  • Medium 6.3
    CVE-2024-1781 Public exploit EPSS 15%

    Totolink X6000R AX3000 shttpd cstecgi.cgi setWizardCfg command injection

    A vulnerability was found in Totolink X6000R AX3000 9.4.0cu.852_20230719. It has been rated as critical. This issue affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component shttpd. The manipulation leads to command injection. The ex…

    Toto Link X6000R AX3000