Vulnerabilidades em totolink
557 resultadosAnálise Vexday
A base do Vexday registra 30 CVEs associadas ao fornecedor totolink, todas classificadas como críticas pelo CVSS e todas publicadas nos últimos 90 dias, o que indica um volume concentrado e recente de exposição. Nenhuma delas consta no catálogo KEV até o momento, de modo que não há evidência de exploração ativa confirmada nesta base. A fraqueza dominante é o CWE-121 (estouro de buffer na pilha), padrão que merece atenção prioritária na avaliação de dispositivos desse fornecedor em uso.
CVE-2026-121599CRITICALTOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflowEPSS 0.5%CVE-2026-121598CRITICALTOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflowEPSS 0.5%CVE-2026-123957CRITICALTOTOLINK CA300-PoE cstecgi.cgi setIpQosRules buffer overflowEPSS 0.5%CVE-2026-121600CRITICALTOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflowEPSS 0.5%CVE-2026-123958CRITICALTOTOLINK CA300-PoE cstecgi.cgi setLanConfig buffer overflowEPSS 0.5%CVE-2025-5505MEDIUMTOTOLINK A3002RU Virtual Server Page formPortFw cross site scriptingEPSS 0.5%CVE-2026-8137HIGHTotolink X5000R formDdns sub_458E40 buffer overflowEPSS 0.5%CVE-2026-7750HIGHTotolink N300RH POST Request cstecgi.cgi setMacFilterRules buffer overflowEPSS 0.5%CVE-2026-7218HIGHTotolink N300RT libapmib.so formWsc is_cmd_string_valid buffer overflowEPSS 0.5%CVE-2026-7748HIGHTotolink N300RH POST Request cstecgi.cgi setUpgradeFW buffer overflowEPSS 0.5%CVE-2024-7216LOWTOTOLINK LR1200 shadow.sample hard-coded passwordEPSS 0.4%CVE-2025-5508MEDIUMTOTOLINK A3002RU IP Port Filtering Page cross site scriptingEPSS 0.4%CVE-2024-7154MEDIUMTOTOLINK A3700R Password Reset wizard.html access controlEPSS 0.4%CVE-2025-3995MEDIUMTOTOLINK N150RT LAN Settings Page fromStaticDHCP cross site scriptingEPSS 0.4%CVE-2026-5676MEDIUMTotolink A8000R cstecgi.cgi setLanguageCfg missing authenticationEPSS 0.4%CVE-2025-4852MEDIUMTOTOLINK A3002R VPN Page cross site scriptingEPSS 0.4%CVE-2025-6139LOWTOTOLINK T10 shadow.sample hard-coded passwordEPSS 0.4%CVE-2026-116507MEDIUMTOTOLINK A950RG global.so getLanguageCfg information disclosureEPSS 0.4%CVE-2025-3996MEDIUMTOTOLINK N150RT MAC Filtering Page home.htm cross site scriptingEPSS 0.4%CVE-2025-5507MEDIUMTOTOLINK A3002RU MAC Filtering Page cross site scriptingEPSS 0.4%