CVE Tools
Track your stack

Totolink

1,264 CVEs tracked since 2020. Since Jan 2020, none of them reached CISA KEV.

Totolink CVEs per month

Jan 2020 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Totolink CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2020-0140
2020-022 or fewer
2020-032 or fewer
2020-04no snapshot
2020-05no snapshot
2020-062 or fewer
2020-07no snapshot
2020-082 or fewer
2020-091 or fewer
2020-101 or fewer
2020-1120
2020-122 or fewer
2021-012 or fewer
2021-022 or fewer
2021-03no snapshot
2021-042 or fewer
2021-052 or fewer
2021-062 or fewer
2021-072 or fewer
2021-08100
2021-092 or fewer
2021-102 or fewer
2021-112 or fewer
2021-122 or fewer
2022-012 or fewer
2022-02300
2022-03280
2022-043 or fewer
2022-05400
2022-06120
2022-07120
2022-08420
2022-09170
2022-10110
2022-11140
2022-123 or fewer
2023-01100
2023-02290
2023-03no snapshot
2023-0480
2023-05100
2023-064 or fewer
2023-0790
2023-0870
2023-093 or fewer
2023-10590
2023-11110
2023-12400
2024-01730
2024-024 or fewer
2024-03100
2024-04190
2024-05420
2024-06120
2024-07380
2024-08420
2024-09130
2024-104 or fewer
2024-1170
2024-123 or fewer
2025-01200
2025-0280
2025-03140
2025-04470
2025-05680
2025-06780
2025-07330
2025-08160
2025-09140
2025-10240
2025-11110
2025-1270
2026-01190
2026-02140
2026-03140
2026-04940
2026-05500
2026-067 or fewer
2026-077 or fewer
2026-08170
2026-09130
2026-10420
2026-110

Products

The products that kept showing up in Totolink's monthly top three, with their CVEs summed over those months.

  1. A3300R Firmware566 months
  2. X5000R Firmware528 months
  3. A8000RU502 months
  4. A3002R Firmware485 months
  5. X6000R Firmware434 months
  6. A7100RU423 months
  7. T6 Firmware364 months
  8. A3002R352 months
  9. X2000R Firmware323 months
  10. EX1200T Firmware312 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Totolink.

  1. CVE-2026-124060TOTOLINK CA300-PoE cstecgi.cgi UploadCustomModule buffer overflow9.1
  2. CVE-2026-124059TOTOLINK CA300-PoE cstecgi.cgi setWiFiWdsAddConfig buffer overflow9.1
  3. CVE-2026-124058TOTOLINK CA300-PoE cstecgi.cgi setWiFiRepeaterConfig buffer overflow9.1
  4. CVE-2026-124057TOTOLINK CA300-PoE cstecgi.cgi setWiFiMultipleConfig buffer overflow9.1
  5. CVE-2026-123961TOTOLINK CA300-PoE cstecgi.cgi setWiFiBasicConfig buffer overflow9.9
  6. CVE-2026-123960TOTOLINK CA300-PoE cstecgi.cgi setWanConfig buffer overflow9.9
  7. CVE-2026-123959TOTOLINK CA300-PoE cstecgi.cgi setLanguageCfg buffer overflow9.1
  8. CVE-2026-123958TOTOLINK CA300-PoE cstecgi.cgi setLanConfig buffer overflow9.9
  9. CVE-2026-123957TOTOLINK CA300-PoE cstecgi.cgi setIpQosRules buffer overflow9.9
  10. CVE-2026-121600TOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflow9.9
  11. CVE-2026-121599TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow9.9
  12. CVE-2026-121598TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow9.9
  13. CVE-2026-121597TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflow9.9
  14. CVE-2026-116508TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow10.0
  15. CVE-2026-116507TOTOLINK A950RG global.so getLanguageCfg information disclosure5.3

The record

Peak rank
#7 in Apr 2026
Busiest month shown
Apr 2026, 94 CVEs
Months with a KEV entry
0 since Jan 2020
Monthly snapshots
50 since 2020
Totolink's full record, month by month