TOTOLINK
Number 31 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Combines these spellings from source records: TOTOLINK, Totolink, totolink
Total vulnerabilities
761
Critical
216
High
335
Known Exploited
0
Exploit available
502
Network, no login needed
31.4%
Of 724 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 248 | 159 | 45 | 42 | 2 | 0 |
| 2025 | 191 | 5 | 125 | 45 | 16 | 0 |
| 2024 | 231 | 44 | 125 | 51 | 11 | 0 |
| 2023 | 87 | 8 | 37 | 5 | 1 | 36 |
| 2022 | 3 | 0 | 3 | 0 | 0 | 0 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2020 | 1 | 0 | 0 | 0 | 0 | 1 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| A8000RU | 50 | 50 |
| A7100RU | 42 | 42 |
| Totolink | 30 | 30 |
| A702R | 27 | 27 |
| x2000r_firmware | 27 | 18 |
| X15 | 25 | 24 |
| x5000r_firmware | 24 | 21 |
| x6000r_firmware | 24 | 18 |
| A3600R | 20 | 15 |
| EX1200T | 18 | 18 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Command Injection | 278 | 183 |
| Memory Corruption | 258 | 253 |
| Stack-based Buffer Overflow | 77 | 70 |
| Cross-Site Scripting | 23 | 1 |
| Improper Access Control | 20 | 5 |
| Use of Hard-coded Password | 10 | 5 |
| Authentication Issues | 7 | 6 |
| Code Injection | 7 | 5 |
| Information Disclosure | 7 | 2 |
| Least Privilege Violation | 5 | 2 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-124060 | TOTOLINK CA300-PoE cstecgi.cgi UploadCustomModule buffer overflow | Critical | 0.5% | |
| CVE-2026-124059 | TOTOLINK CA300-PoE cstecgi.cgi setWiFiWdsAddConfig buffer overflow | Critical | 0.5% | |
| CVE-2026-124058 | TOTOLINK CA300-PoE cstecgi.cgi setWiFiRepeaterConfig buffer overflow | Critical | 0.5% | |
| CVE-2026-124057 | TOTOLINK CA300-PoE cstecgi.cgi setWiFiMultipleConfig buffer overflow | Critical | 0.6% | |
| CVE-2026-123961 | TOTOLINK CA300-PoE cstecgi.cgi setWiFiBasicConfig buffer overflow | Critical | 0.8% | |
| CVE-2026-123960 | TOTOLINK CA300-PoE cstecgi.cgi setWanConfig buffer overflow | Critical | 0.8% | |
| CVE-2026-123959 | TOTOLINK CA300-PoE cstecgi.cgi setLanguageCfg buffer overflow | Critical | 0.8% | |
| CVE-2026-123958 | TOTOLINK CA300-PoE cstecgi.cgi setLanConfig buffer overflow | Critical | 0.5% | |
| CVE-2026-123957 | TOTOLINK CA300-PoE cstecgi.cgi setIpQosRules buffer overflow | Critical | 0.5% | |
| CVE-2026-121600 | TOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflow | Critical | 0.5% |