TOTOLINK vulnerabilities

CVEs per yearBy the year they were published

1. 20239
2. 2024109
3. 2025191
4. 2026244

Newest CVEs

• CVE-2026-123961

  TOTOLINK CA300-PoE cstecgi.cgi setWiFiBasicConfig buffer overflow

  TOTOLINK · CA300-PoE

  Critical9.4
• CVE-2026-123960

  TOTOLINK CA300-PoE cstecgi.cgi setWanConfig buffer overflow

  TOTOLINK · CA300-PoE

  Critical9.4
• CVE-2026-123959

  TOTOLINK CA300-PoE cstecgi.cgi setLanguageCfg buffer overflow

  TOTOLINK · CA300-PoE

  Critical9.4
• CVE-2026-123958

  TOTOLINK CA300-PoE cstecgi.cgi setLanConfig buffer overflow

  TOTOLINK · CA300-PoE

  Critical9.4
• CVE-2026-123957

  TOTOLINK CA300-PoE cstecgi.cgi setIpQosRules buffer overflow

  TOTOLINK · CA300-PoE

  Critical9.4
• CVE-2026-121600

  TOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflow

  TOTOLINK · A950RG

  Critical9.4
• CVE-2026-121599

  TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow

  TOTOLINK · A950RG

  Critical9.4
• CVE-2026-121598

  TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow

  TOTOLINK · A950RG

  Critical9.4
• CVE-2026-121597

  TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflow

  TOTOLINK · A950RG

  Critical9.4
• CVE-2026-116508

  TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow

  TOTOLINK · A950RG

  Critical10.0