TOTOLINK vulnerabilities

CVEs per yearBy the year they were published

1. 20239
2. 2024109
3. 2025191
4. 2026239

Newest CVEs

• CVE-2026-121600

  TOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflow

  TOTOLINK · A950RG

  Critical9.4
• CVE-2026-121599

  TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow

  TOTOLINK · A950RG

  Critical9.4
• CVE-2026-121598

  TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow

  TOTOLINK · A950RG

  Critical9.4
• CVE-2026-121597

  TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflow

  TOTOLINK · A950RG

  Critical9.4
• CVE-2026-116508

  TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow

  TOTOLINK · A950RG

  Critical10.0
• CVE-2026-116507

  TOTOLINK A950RG global.so getLanguageCfg information disclosure

  TOTOLINK · A950RG

  Medium6.9
• CVE-2026-116506

  TOTOLINK A950RG firewall.so apmib_set command injection

  TOTOLINK · A950RG

  Critical9.4
• CVE-2026-116505

  TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection

  TOTOLINK · A950RG

  Critical9.4
• CVE-2026-116504

  TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection

  TOTOLINK · A950RG

  Critical9.4
• CVE-2026-114575

  TOTOLINK A950RG product.so UploadCustomModule command injection

  TOTOLINK · A950RG

  Critical10.0