#Totolink
All CosmicBytez Labs articles tagged #Totolink, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-94952: Critical Unauthenticated Stack Overflow in TOTOLINK N150RT Routers
CVSS 9.8 unauthenticated stack overflow in TOTOLINK N150RT's formPortFw handler risks remote crash or code execution; no patch exists for this EOL router.
- Security
CVE-2026-93742: Totolink A3002MU Command Injection via formWsc
Public PoC exploits an unauthenticated command injection in Totolink A3002MU's WPS handler, giving remote attackers root on the router.
- Security
Totolink A3002MU Router Buffer Overflow Enables Remote Attacks
CVE-2026-93741 (CVSS 10) lets remote attackers overflow a buffer in the Totolink A3002MU's web admin interface. Public exploit code, no patch yet.
- Security
TOTOLINK A720R Router: Unauthenticated Memory Corruption RCE (CVE-2026-82539)
CVE-2026-82539 (CVSS 9.4) lets remote attackers corrupt memory in TOTOLINK A720R routers via the MAC filtering CGI handler. Public PoC exists.
- Security
CVE-2026-10187: Totolink N300RH Stack Buffer Overflow in WiFi Config
A critical-severity stack buffer overflow in the Totolink N300RH wireless router allows remote attackers to execute arbitrary code via a crafted KeyStr…
- Security
Critical Stack-Based Buffer Overflow in Totolink NR1800X
A critical CVSS 9.8 stack-based buffer overflow in the Totolink NR1800X router's lighttpd component allows unauthenticated remote code execution via a...
- Security
CVE-2026-36841: TOTOLINK N200RE V5 Command Injection
A critical CVSS 9.8 command injection vulnerability in TOTOLINK N200RE V5 allows unauthenticated remote code execution via the macstr and bandstr...
- Security
CVE-2026-7136: Totolink A8000RU OS Command Injection via setDmzCfg
A critical OS command injection vulnerability in the Totolink A8000RU router allows remote attackers to execute arbitrary commands by manipulating the...
- Security
CVE-2026-7154: Totolink A8000RU OS Command Injection via CGI Handler
A critical unauthenticated OS command injection vulnerability in the Totolink A8000RU router firmware 7.1cu.643_b20200521 allows remote attackers to...
- Security
CVE-2026-6112: Totolink A7100RU OS Command Injection via setRadvdCfg
A critical OS command injection vulnerability (CVSS 9.8) in Totolink A7100RU firmware allows unauthenticated remote attackers to execute arbitrary...
- Security
CVE-2026-6113: Totolink A7100RU OS Command Injection via setTtyServiceCfg
A critical OS command injection flaw (CVSS 9.8) in Totolink A7100RU enables remote unauthenticated attackers to execute arbitrary commands by manipulating...
- Security
CVE-2026-6114: Totolink A7100RU OS Command Injection via setNetworkCfg
CVE-2026-6114 is a critical OS command injection vulnerability (CVSS 9.8) in the Totolink A7100RU router's setNetworkCfg function, exploitable remotely...
- Security
CVE-2026-6115: Totolink A7100RU OS Command Injection via setAppCfg
CVE-2026-6115 describes a critical OS command injection vulnerability (CVSS 9.8) in the Totolink A7100RU router, exploitable remotely and without...
- Security
CVE-2026-5977: TOTOLINK A7100RU Critical OS Command
A critical OS command injection vulnerability (CVSS 9.8) in TOTOLINK A7100RU routers allows unauthenticated remote attackers to execute arbitrary system...
- Security
CVE-2026-5978: TOTOLINK A7100RU Critical OS Command
A second critical OS command injection vulnerability (CVSS 9.8) in TOTOLINK A7100RU routers allows unauthenticated remote attackers to execute arbitrary...
- Security
CVE-2026-31027: TOTOlink A3600R Buffer Overflow in setAppEasyWizardConfig
A critical CVSS 9.8 buffer overflow in TOTOlink A3600R v5.9c.4959 allows remote attackers to exploit the rootSsid parameter in the setAppEasyWizardConfig...