Skip to content
OpenAdvisories

Vendor

Toto Link

558 known vulnerabilities.

Products

A8000RU 50 A7100RU 42 Totolink 30 A3002RU 27 A702R 27 A3002R 25 X15 25 A3600R 20 EX1200T 19 A3300R 17 T6 16 N300RH 15 N150RT 15 N200RE 14 LR1200GB 14 AC1200 T8 14 A3002MU 14 CA300-PoE 14 A3700R 12 T10 12 A950RG 12 A800R 11 EX1200L 11 NR1800X 10 X6000R 10 LR350 9 CA750-PoE 9 N350RT 9 X2000R 9 WA300 8 EX1800T 8 N600R 7 A720R 7 A7000R 7 X5000R 6 EX200 6 A3000RU 5 CP450 5 A3100R 4 X18 4
All Critical High Medium Low Exploited only Public exploit

558 results · Feed

  • Critical 9.8
    CVE-2026-7137

    Totolink A8000RU CGI cstecgi.cgi setStorageCfg os command injection

    A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument sambaEnabled leads to os command inject…

    Toto Link A8000RU
  • Critical 9.8
    CVE-2026-7136

    Totolink A8000RU CGI cstecgi.cgi setDmzCfg os command injection

    A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. Affected by this issue is the function setDmzCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument wanIdx can lead to os command inje…

    Toto Link A8000RU
  • Critical 9.8
    CVE-2026-7125

    Totolink A8000RU CGI cstecgi.cgi setWiFiEasyCfg os command injection

    A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. Affected by this issue is the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument merge leads to os command injection. …

    Toto Link A8000RU
  • Critical 9.8
    CVE-2026-7124

    Totolink A8000RU CGI cstecgi.cgi setIpv6LanCfg os command injection

    A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. Affected by this vulnerability is the function setIpv6LanCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument addrPrefixLen can lead…

    Toto Link A8000RU
  • Critical 9.8
    CVE-2026-7123

    Totolink A8000RU CGI cstecgi.cgi setIptvCfg os command injection

    A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument setIptvCfg results in os command injection. The att…

    Toto Link A8000RU
  • Critical 9.8
    CVE-2026-7122

    Totolink A8000RU CGI cstecgi.cgi setUPnPCfg os command injection

    A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This impacts the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument enable leads to os command injection. It is possible …

    Toto Link A8000RU
  • Critical 9.8
    CVE-2026-7121

    Totolink A8000RU CGI cstecgi.cgi setWizardCfg os command injection

    A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument wizard causes os command injection. It is possible to initia…

    Toto Link A8000RU
  • Critical 9.8
    CVE-2026-7037

    Totolink A8000RU CGI cstecgi.cgi setVpnPassCfg os command injection

    A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument pptpPassThru results in os command injec…

    Toto Link A8000RU
  • Critical 9.8
    CVE-2026-6195 EPSS 14%

    Totolink A7100RU CGI cstecgi.cgi setPasswordCfg os command injection

    A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument admpass leads to os com…

    Toto Link A7100RU
  • High 8.8
    CVE-2026-6194

    Totolink A3002MU HTTP Request formWlanSetup sub_410188 stack-based overflow

    A weakness has been identified in Totolink A3002MU B20211125.1046. Affected by this vulnerability is the function sub_410188 of the file /boafrm/formWlanSetup of the component HTTP Request Handler. This manipulation of the argument wan-url causes stack-based …

    Toto Link A3002MU
  • High 8.8
    CVE-2026-6168

    TOTOLINK A7000R cstecgi.cgi setWiFiEasyGuestCfg stack-based overflow

    A flaw has been found in TOTOLINK A7000R up to 9.1.0u.6115. The affected element is the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ssid5g causes stack-based buffer overflow. Remote exploitation of the atta…

    Toto Link A7000R
  • High 7.3
    CVE-2026-6158

    Totolink N300RH upgrade.so setUpgradeUboot os command injection

    A flaw has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setUpgradeUboot of the file upgrade.so. This manipulation of the argument FileName causes os command injection. The attack is possible to be carried out remotely. The explo…

    Toto Link N300RH
  • High 8.8
    CVE-2026-6157

    Totolink A800R app.so setAppEasyWizardConfig buffer overflow

    A vulnerability was detected in Totolink A800R 4.1.2cu.5137_B20200730. This impacts the function setAppEasyWizardConfig in the library /lib/cste_modules/app.so. The manipulation of the argument apcliSsid results in buffer overflow. The attack can be executed …

    Toto Link A800R
  • Critical 9.8
    CVE-2026-6156

    Totolink A7100RU CGI cstecgi.cgi setIpQosRules os command injection

    A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument Comment leads to os command injection.…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-6155

    Totolink A7100RU CGI cstecgi.cgi setWanCfg os command injection

    A weakness has been identified in Totolink A7100RU 7.4cu.2313. The impacted element is the function setWanCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument pppoeServiceName can lead to os command injec…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-6154

    Totolink A7100RU CGI cstecgi.cgi setWizardCfg os command injection

    A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument wizard results in os comma…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-6140

    Totolink A7100RU CGI cstecgi.cgi UploadFirmwareFile os command injection

    A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument FileName results in os command injection.…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-6139

    Totolink A7100RU CGI cstecgi.cgi UploadOpenVpnCert os command injection

    A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function UploadOpenVpnCert of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument FileName leads to os command injection. The a…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-6138

    Totolink A7100RU CGI cstecgi.cgi setAccessDeviceCfg os command injection

    A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setAccessDeviceCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument mac causes os command injection. The attac…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-6132

    Totolink A7100RU CGI cstecgi.cgi setLedCfg os command injection

    A vulnerability was determined in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setLedCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument enable causes os command injection. Remo…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-6131

    Totolink A7100RU CGI cstecgi.cgi setTracerouteCfg os command injection

    A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this vulnerability is the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument command results in os command i…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-6116

    Totolink A7100RU CGI cstecgi.cgi setDiagnosisCfg os command injection

    A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument ip leads to os command injection. …

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-6115

    Totolink A7100RU CGI cstecgi.cgi setAppCfg os command injection

    A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setAppCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument enable can lead to os command injection. The attack may…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-6114

    Totolink A7100RU CGI cstecgi.cgi setNetworkCfg os command injection

    A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setNetworkCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument proto results in os command in…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-6113

    Totolink A7100RU CGI cstecgi.cgi setTtyServiceCfg os command injection

    A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this vulnerability is the function setTtyServiceCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument ttyEnable lea…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-6112

    Totolink A7100RU CGI cstecgi.cgi setRadvdCfg os command injection

    A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Affected is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument maxRtrAdvInterval causes os command injection. The a…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-6029

    Totolink A7100RU CGI cstecgi.cgi setVpnAccountCfg os command injection

    A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setVpnAccountCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument User results in os command injection. …

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-6028

    Totolink A7100RU CGI cstecgi.cgi setPptpServerCfg os command injection

    A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function setPptpServerCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument enable leads to os command injection…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-6027

    Totolink A7100RU CGI cstecgi.cgi setUrlFilterRules os command injection

    A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This issue affects the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument enable can lead to os command in…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-6026

    Totolink A7100RU CGI cstecgi.cgi setPortalConfWeChat os command injection

    A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setPortalConfWeChat of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument enable results i…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-6025

    Totolink A7100RU CGI cstecgi.cgi setSyslogCfg os command injection

    A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument enable leads to os command injection. It is possib…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-5997

    Totolink A7100RU CGI cstecgi.cgi setLoginPasswordCfg os command injection

    A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setLoginPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument admpass results in os command injec…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-5996

    Totolink A7100RU CGI cstecgi.cgi setAdvancedInfoShow os command injection

    A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setAdvancedInfoShow of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument tty_server leads to o…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-5995

    Totolink A7100RU CGI cstecgi.cgi setMiniuiHomeInfoShow os command injection

    A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function setMiniuiHomeInfoShow of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument lan_info can lead to os command inj…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-5994

    Totolink A7100RU CGI cstecgi.cgi setTelnetCfg os command injection

    A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This issue affects the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument telnet_enabled results in os co…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-5993

    Totolink A7100RU CGI cstecgi.cgi setWiFiGuestCfg os command injection

    A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setWiFiGuestCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument wifiOff leads to os command injec…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-5978

    Totolink A7100RU CGI cstecgi.cgi setWiFiAclRules os command injection

    A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument mode leads to os command injection. T…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-5977

    Totolink A7100RU CGI cstecgi.cgi setWiFiBasicCfg os command injection

    A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument wifiOff can lead to os command injection…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-5976

    Totolink A7100RU CGI cstecgi.cgi setStorageCfg os command injection

    A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument sambaEnabled results in os command i…

    Toto Link A7100RU
  • Critical 9.8
    CVE-2026-5975

    Totolink A7100RU CGI cstecgi.cgi setDmzCfg os command injection

    A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setDmzCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument wanIdx leads to os command injection. The …

    Toto Link A7100RU