Skip to content
OpenAdvisories

Product · Toto Link

T10

12 known vulnerabilities.

T10 at a glance

Last 12 months
1
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 1 vulnerability, 1 critical Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202511
Nov 202500
Oct 202500
Sep 202500
Aug 202510
Jul 202500
Jun 202580
May 202510
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Critical 9.8
    CVE-2025-14964

    TOTOLINK T10 cstecgi.cgi sprintf stack-based overflow

    A vulnerability has been found in TOTOLINK T10 4.1.8cu.5083_B20200521. This affects the function sprintf of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument loginAuthUrl leads to stack-based buffer overflow. The attack may be performed from re…

    Toto Link T10
  • High 7.3
    CVE-2025-9533 EPSS 12%

    TOTOLINK T10 formLoginAuth.htm improper authentication

    A vulnerability has been found in TOTOLINK T10 4.1.8cu.5241_B20210927. Affected is an unknown function of the file /formLoginAuth.htm. The manipulation of the argument authCode with the input 1 leads to improper authentication. The attack can be initiated rem…

    Toto Link T10
  • Low 3.9
    CVE-2025-6139

    TOTOLINK T10 shadow.sample hard-coded password

    A vulnerability, which was classified as problematic, has been found in TOTOLINK T10 4.1.8cu.5207. Affected by this issue is some unknown functionality of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. The attack can only b…

    Toto Link T10
  • High 8.8
    CVE-2025-6138

    TOTOLINK T10 HTTP POST Request cstecgi.cgi setWizardCfg buffer overflow

    A vulnerability classified as critical was found in TOTOLINK T10 4.1.8cu.5207. Affected by this vulnerability is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ssid5g lea…

    Toto Link T10
  • High 8.8
    CVE-2025-6137

    TOTOLINK T10 HTTP POST Request cstecgi.cgi setWiFiScheduleCfg buffer overflow

    A vulnerability classified as critical has been found in TOTOLINK T10 4.1.8cu.5207. Affected is the function setWiFiScheduleCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument desc leads to buffer …

    Toto Link T10
  • High 8.8
    CVE-2025-5905 EPSS 12%

    TOTOLINK T10 POST Request cstecgi.cgi setWiFiRepeaterCfg buffer overflow

    A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been rated as critical. Affected by this issue is the function setWiFiRepeaterCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument Password …

    Toto Link T10
  • High 8.8
    CVE-2025-5904 EPSS 12%

    TOTOLINK T10 POST Request cstecgi.cgi setWiFiMeshName buffer overflow

    A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability is the function setWiFiMeshName of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument d…

    Toto Link T10
  • High 8.8
    CVE-2025-5903 EPSS 12%

    TOTOLINK T10 POST Request cstecgi.cgi setWiFiAclRules buffer overflow

    A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been classified as critical. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument desc leads to buffer …

    Toto Link T10
  • High 8.8
    CVE-2025-5902

    TOTOLINK T10 POST Request cstecgi.cgi setUpgradeFW buffer overflow

    A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This issue affects the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument slaveIpList leads to buffe…

    Toto Link T10
  • High 8.8
    CVE-2025-5901

    TOTOLINK T10 POST Request cstecgi.cgi UploadCustomModule buffer overflow

    A vulnerability has been found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This vulnerability affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument File le…

    Toto Link T10
  • High 8.8
    CVE-2025-4496

    TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow

    A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation…

    Toto Link T10 A950RG A800R
  • Medium 6.3
    CVE-2024-9001

    TOTOLINK T10 cstecgi.cgi setTracerouteCfg os command injection

    A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. This vulnerability affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument command leads to os command injection. The at…

    Toto Link T10