Totolink

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Totolink product.

RSS Feeds for Totolink security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Totolink products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Totolink Sorted by Most Security Vulnerabilities since 2018

Totolink A7100ru Firmware64 vulnerabilities

Totolink A8000ru Firmware52 vulnerabilities

Totolink X5000r Firmware44 vulnerabilities

Totolink A3300r Firmware39 vulnerabilities

Totolink X6000r Firmware36 vulnerabilities

Totolink Ca300 Poe Firmware33 vulnerabilities

Totolink A3700r Firmware31 vulnerabilities

Totolink X2000r Firmware30 vulnerabilities

Totolink Lr350 Firmware25 vulnerabilities

Totolink X15 Firmware25 vulnerabilities

Totolink A3002r Firmware23 vulnerabilities

Totolink Ex1200t Firmware22 vulnerabilities

Totolink T8 Firmware22 vulnerabilities

Totolink Cp450 Firmware21 vulnerabilities

Totolink Ex200 Firmware21 vulnerabilities

Totolink A3600r Firmware20 vulnerabilities

Totolink N150rt Firmware16 vulnerabilities

Totolink Nr1800x Firmware16 vulnerabilities

Totolink A800r Firmware16 vulnerabilities

Totolink Ex1800t Firmware15 vulnerabilities

Totolink N300rh Firmware15 vulnerabilities

Totolink T6 Firmware14 vulnerabilities

Totolink A950rg Firmware13 vulnerabilities

Totolink A6000r Firmware13 vulnerabilities

Totolink T10 Firmware11 vulnerabilities

Totolink X18 Firmware11 vulnerabilities

Totolink A810r Firmware10 vulnerabilities

Totolink A3100r Firmware10 vulnerabilities

Totolink A3002ru Firmware10 vulnerabilities

Totolink Ca600 Poe Firmware10 vulnerabilities

Totolink A3002mu10 vulnerabilities

Totolink A702r Firmware10 vulnerabilities

Totolink Ca750 Poe9 vulnerabilities

Totolink A7000r Firmware9 vulnerabilities

Totolink Cp900l Firmware8 vulnerabilities

Totolink Wa300 Firmware8 vulnerabilities

Totolink N300rt Firmware8 vulnerabilities

Totolink N600r Firmware8 vulnerabilities

Totolink Cp900 Firmware7 vulnerabilities

Totolink A720r Firmware7 vulnerabilities

Totolink Ex1200l Firmware7 vulnerabilities

Totolink N350rt Firmware4 vulnerabilities

Totolink A3000ru Firmware3 vulnerabilities

Totolink A830r Firmware3 vulnerabilities

Totolink Cp300 Firmware3 vulnerabilities

Totolink A3200r Firmware3 vulnerabilities

Totolink Ex1200l2 vulnerabilities

Totolink N302r Plus Firmware2 vulnerabilities

Totolink N200re V5 Firmware2 vulnerabilities

Totolink X182 vulnerabilities

Totolink Cp900 L2 vulnerabilities

Totolink Lr1200gb Firmware2 vulnerabilities

Totolink Lr1200 Firmware2 vulnerabilities

Totolink A3100r1 vulnerability

Totolink A3700r1 vulnerability

Totolink A6000ub Firmware1 vulnerability

Totolink A3002ru V3 Firmware1 vulnerability

Totolink A860r Firmware1 vulnerability

Totolink A3000ru1 vulnerability

Totolink A950rg1 vulnerability

Totolink Ac1200 T81 vulnerability

Totolink Ac1200t101 vulnerability

Totolink N600r1 vulnerability

Totolink Ar810r Firmware1 vulnerability

Totolink N302re Firmware1 vulnerability

Totolink N302r Firmware1 vulnerability

Totolink N301rt Firmware1 vulnerability

Totolink Cp4501 vulnerability

Totolink N300rb Firmware1 vulnerability

Totolink N200re Firmware1 vulnerability

Totolink Cp9001 vulnerability

Totolink N100re Firmware1 vulnerability

Totolink Cs185r T101 vulnerability

Totolink Ex2001 vulnerability

By the Year

In 2026 there have been 245 vulnerabilities in Totolink with an average score of 8.7 out of ten. Last year, in 2025 Totolink had 253 security vulnerabilities published. If vulnerabilities keep coming in at the current rate, it appears that number of security vulnerabilities in Totolink in 2026 could surpass last years number. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.60.

Year	Vulnerabilities	Average Score
2026	245	8.69
2025	253	8.09
2024	219	9.04
2023	106	9.65
2022	18	9.30
2021	0	0.00
2020	1	0.00

It may take a day or so for new Totolink vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Totolink Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-124060	Nov 07, 2026	TOTOLINK CA300-PoE 6.2c.884 cstecgi.cgi UploadCustomModule Buffer Overflow A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.	Ca300 Poe Firmware
CVE-2026-124059	Nov 07, 2026	TOTOLINK CA300-PoE 6.2c.884 CGI Buffer Overflow (setWiFiWdsAddConfig) A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ApCliKeyStr leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.	Ca300 Poe Firmware
CVE-2026-124058	Nov 07, 2026	TOTOLINK CA300-PoE 6.2c.884 Remote Buffer Overflow in setWiFiRepeaterConfig A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. Affected is the function setWiFiRepeaterConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument ApCliKeyStr can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.	Ca300 Poe Firmware
CVE-2026-124057	Nov 07, 2026	TOTOLINK CA300-PoE 6.2c.884 cgi-bin cstecgi.cgi Buffer Overflow A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument Key1Str1 results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.	Ca300 Poe Firmware
CVE-2026-123961	Nov 07, 2026	TOTOLINK CA300-PoE 6.2c.884 cstecgi.cgi setWiFiBasicConfig BOF A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument KeyStr leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.	Ca300 Poe Firmware
CVE-2026-123960	Nov 07, 2026	TOTOLINK CA300-PoE 6.2c.884 cgi-bin cstecgi.cgi setWanConfig BO A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument pppoeUser/priDns/secDns can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.	Ca300 Poe Firmware
CVE-2026-123959	Nov 07, 2026	TOTOLINK CA300-PoE 6.2c.884 cstecgi.cgi setLanguageCfg Remote Buffer Overflow A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. The impacted element is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument langType results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.	Ca300 Poe Firmware
CVE-2026-123958	Nov 07, 2026	TOTOLINK CA300-PoE 6.2c.884 cstecgi.cgi setLanConfig BOF A vulnerability was identified in TOTOLINK CA300-PoE 6.2c.884. The affected element is the function setLanConfig of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument lanDns/lanSecDns/langType leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.	Ca300 Poe Firmware
CVE-2026-123957	Nov 07, 2026	TOTOLINK CA300-PoE 6.2c.884 cstecgi.cgi setIpQosRules Buffer Overflow A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. Impacted is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ipStart causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.	Ca300 Poe Firmware
CVE-2026-121600	Nov 04, 2026	TOTOLINK A950RG MAC Filter Handler Buffer Overflow (v4.1.2cu.5268_B20221104) A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component MAC Filter Handler. This manipulation of the argument addEffect causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.	A950rg Firmware
CVE-2026-121599	Nov 04, 2026	TOTOLINK A950RG 4.1.2cu Buffer Overflow in Multi-SSID Config (setWiFiMultCfg) A vulnerability was detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function setWiFiMultipleConfig/delWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi of the component Multi-SSID Configuration. The manipulation of the argument wepkey2/wepkey3 results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.	A950rg Firmware
CVE-2026-121598	Nov 04, 2026	TOTOLINK A950RG 4.1.2cu.5268_B20221104 Stack Buffer Overflow via wepkey A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.	A950rg Firmware
CVE-2026-121597	Nov 04, 2026	Totolink A950RG 4.1.2CU Buffer Overflow in Easy Setup Wizard A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler. Executing a manipulation of the argument functionType can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.	A950rg Firmware
CVE-2026-116508	Oct 26, 2026	TOTOLINK A950RG 4.1.2cu.5268 Buffer Overflow in infostat.cgi (Device-Info CGI) A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function sub_402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENT_LENGTH results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.	A950rg Firmware
CVE-2026-116507	Oct 26, 2026	TOTOLINK A950RG 4.1.2cu.5268 Info Disclosure via global.so getLanguageCfg A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so. Such manipulation of the argument token leads to information disclosure. The attack may be launched remotely. The exploit is publicly available and might be used.	A950rg Firmware
CVE-2026-116506	Oct 26, 2026	Command Injection in TOTOLINK A950RG 4.1.2cu Firewall.so apmib_set before 4.1.2cu.5268_B20221104 A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.	A950rg Firmware
CVE-2026-116505	Oct 26, 2026	TOTOLINK A950RG 4.1.2cu.5268_B20221104 Remote Cmd Injection in DeviceInfo Handler A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched remotely. The exploit has been made public and could be used.	A950rg Firmware
CVE-2026-116504	Oct 26, 2026	TOTOLINK A950RG 4.1.2cu.5268 Command Injection in Cloud Upgrade A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setCloudUpgradeFW of the file lib/cste_modules/upgrade.so of the component Cloud Upgrade. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.	A950rg Firmware
CVE-2026-114575	Oct 22, 2026	TOTOLINK A950RG 4.1.2cu.5268 command injection in UploadCustomModule A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste_modules/product.so. Executing a manipulation of the argument FileMd5 can lead to command injection. The attack can be launched remotely. The exploit has been published and may be used.	A950rg Firmware
CVE-2026-114383	Oct 21, 2026	TOTOLINK EX200 5.2.3c.7200 stack buffer overflow in wireless.so (setWiFiAclAddConfig) A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This manipulation of the argument macAddress causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.	Ex200 Firmware
CVE-2026-114382	Oct 21, 2026	TOTOLINK EX200 5.2.3c.7200 lan.so stack buffer overflow (remote) A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.	Ex200 Firmware
CVE-2026-35499	Oct 20, 2026	X2000R OS Command Injection via formWsc peerRptPin v1.0.0 An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-40627	Oct 20, 2026	Command injection in Boa formWsc targetAPSsid - Totolink X2000R v1.0.0 An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-33568	Oct 20, 2026	OS Command Injection in X2000R boa formMapDelDevice macstr (v1.0.0) A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-28763	Oct 20, 2026	X2000R Boa formMapDelDevice BOF (V1.0.0) A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-41223	Oct 20, 2026	X2000R v1.0.0 Buffer Overflow in boa formMapDelDevice A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-40615	Oct 20, 2026	CVE-2026-40615: Stack Overflow in BOA formParentControl of X2000R v1.0.0 A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-41222	Oct 20, 2026	X2000R TOTOLINK Stack BF in boa-formParentControl, V1.0.0-B20250421 A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-42024	Oct 20, 2026	Stack Buffer Overflow in TOTOLINK X2000R Static IPv6 Config (v1.0.0) Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the static_gw parameter.
CVE-2026-42023	Oct 20, 2026	Boa IPv6Setup Buffer Overflow in Totolink X2000R 1.0.0 (boa formIpv6Setup) Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the static_ipv6 parameter.
CVE-2026-42022	Oct 20, 2026	boa formIpv6Setup stack buffer overflow in Totolink X2000R pre1.0.0 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the static_dns2 parameter.
CVE-2026-42021	Oct 20, 2026	Totolink X2000R v1.0.0 Buffer Overflow in formIpv6Setup (static_dns1) Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the static_dns1 parameter.
CVE-2026-42020	Oct 20, 2026	Stack Buffer Overflow: Totolink X2000R Boa pppoe_dns2 v1.0.0 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the pppoe_dns2 parameter.
CVE-2026-42019	Oct 20, 2026	Totolink X2000R V1.0.0-Stack Buffer Overflow in boa formIpv6Setup pppoe Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the pppoe_dns1 parameter.
CVE-2026-9660	Oct 20, 2026	X2000R v1.0.0 Buffer Overflow in formFilter via vpnPassword Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability deals with the vpnPassword parameter.
CVE-2026-9659	Oct 20, 2026	Stack Overflow in X2000R boa formFilter v1.0 (Arbitrary Code Exec) Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability deals with the vpnUser parameter.
CVE-2026-42026	Oct 20, 2026	X2000R Stack Buffer Overflow in dhcp_dns2 (v1.0.0) Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the dhcp_dns2 parameter.
CVE-2026-42025	Oct 20, 2026	X2000R Boa formIpv6Setup dhcp_dns Stack Buffer Overflow (V1.0.0) Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. This vulnerability concerns the dhcp_dns1 parameter.
CVE-2026-9814	Oct 20, 2026	X2000R OS Command Injection in boa formWizard (before 1.0.0) An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-9817	Oct 20, 2026	X2000R 1.0.0 Boa UploadFile Buffer Overrun A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-9827	Oct 20, 2026	X2000R V1.0.0 boa formUploadFile arbitrary file write (CVE-2026-9827) A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-9869	Oct 20, 2026	Stack overflow in TOTOLINK X2000R boa formTR069Config (V1.0.0) A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-10131	Oct 20, 2026	X2000R OS Command Injection via boa formPasswordSetup (V1.0.0) An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-10132	Oct 20, 2026	X2000R Boa formIpQos MAC stack overflow auth HTTP->code exec v1.0 A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-10133	Oct 20, 2026	Stack Buffer Overflow CVE-2026-10133 in X2000R batchupg, V1.0.0 A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-10135	Oct 20, 2026	X2000R v1.0.0-Base OS Command Injection via batchupg A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-10137	Oct 20, 2026	X2000R V1.0.0 TOTOLINK boa formUpload() stack overflow leads to A/C exec A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-10136	Oct 20, 2026	X2000R heap overflow in formUpload (V1.0.0-B20250421.1327) code exec A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-10139	Oct 20, 2026	X2000R V1.0.0 stack-based buffer overflow in Mcli A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-10138	Oct 20, 2026	OS Command Injection in X2000R Boa formUpload v1.0.0 via HTTP A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.