Nr1800x firmware

This hub aggregates every CVE we track for Nr1800x firmware, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Nr1800x firmware.

• CVE-2026-5030Totolink NR1800X Telnet Service cstecgi.cgi NTPSyncWithHost command injection6.3Mar 29, 2026
• CVE-2026-1328Totolink NR1800X POST Request cstecgi.cgi setWizardCfg buffer overflow8.8Jan 22, 2026
• CVE-2026-1327Totolink NR1800X POST Request cstecgi.cgi setTracerouteCfg command injection6.3Jan 22, 2026
• CVE-2026-1326Totolink NR1800X POST Request cstecgi.cgi setWanCfg command injection6.3Jan 22, 2026
• CVE-2025-60684A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (sub_42F32C functio...6.5Nov 13, 2025
• CVE-2025-60688A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (setDefResponse fun...6.5Nov 13, 2025
• CVE-2025-60686A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.cgi binaries of ToToLink routers (A720R V4.1.5cu.614_B20230630, LR1200GB V9.1.0u.6619_B20230130, and NR1800X...5.1Nov 13, 2025
• CVE-2025-45841TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function.9.8May 8, 2025
• CVE-2025-45845TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function.8.8May 8, 2025
• CVE-2025-45842TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function.8.8May 8, 2025
• CVE-2025-45844TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function.8.8May 8, 2025
• CVE-2025-45843TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function.8.8May 8, 2025
• CVE-2024-35388TOTOLINK NR1800X v9.1.0u.6681_B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode8.8May 24, 2024
• CVE-2023-7220Totolink NR1800X cstecgi.cgi loginAuth stack-based overflow9.8Jan 9, 2024
• CVE-2023-36340TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.9.8Oct 16, 2023