| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-0641 | TOTOLINK WA300 cstecgi.cgi sub_401510 command injection | TOTOLINK | WA300 | Medium | 6.3 | 2026-01-06 19:02:07 | Deep Dive |
| CVE-2025-14964 | TOTOLINK T10 cstecgi.cgi sprintf stack-based overflow | TOTOLINK | T10 | Critical | 9.8 | 2025-12-19 19:02:07 | Deep Dive |
| CVE-2025-14586 | TOTOLINK X5000R cstecgi.cgi snprintf os command injection | TOTOLINK | X5000R | Medium | 6.3 | 2025-12-13 06:32:11 | Deep Dive |
| CVE-2025-34319 | TOTOLINK N300RT <= V2.1.8-B20201030.1539 Boa formWsc RCE | TOTOLINK | N300RT | - | - | 2025-12-03 16:49:11 | Deep Dive |
| CVE-2025-12260 | TOTOLINK A3300R POST Parameter cstecgi.cgi setSyslogCfg stack-based overflow | TOTOLINK | A3300R | High | 8.8 | 2025-10-27 10:02:12 | Deep Dive |
| CVE-2025-12259 | TOTOLINK A3300R POST Parameter cstecgi.cgi setScheduleCfg stack-based overflow | TOTOLINK | A3300R | High | 8.8 | 2025-10-27 10:02:08 | Deep Dive |
| CVE-2025-12258 | TOTOLINK A3300R POST Parameter cstecgi.cg setOpModeCfg stack-based overflow | TOTOLINK | A3300R | High | 8.8 | 2025-10-27 09:32:12 | Deep Dive |
| CVE-2025-12241 | TOTOLINK A3300R POST Parameter cstecgi.cgi setLanguageCfg stack-based overflow | TOTOLINK | A3300R | High | 8.8 | 2025-10-27 07:02:11 | Deep Dive |
| CVE-2025-12240 | TOTOLINK A3300R cstecgi.cgi setDmzCfg buffer overflow | TOTOLINK | A3300R | High | 8.8 | 2025-10-27 06:32:15 | Deep Dive |
| CVE-2025-12239 | TOTOLINK A3300R cstecgi.cgi setDdnsCfg buffer overflow | TOTOLINK | A3300R | High | 8.8 | 2025-10-27 06:32:10 | Deep Dive |
| CVE-2025-11444 | TOTOLINK N600R HTTP Request cstecgi.cgi setWiFiBasicConfig buffer overflow | TOTOLINK | N600R | High | 8.8 | 2025-10-08 08:02:10 | Deep Dive |
| CVE-2025-11005 | TOTOLINK X6000R Unauthenticated Command Injection Vulnerability | TOTOLINK | X6000R | - | - | 2025-09-25 20:17:46 | Deep Dive |
| CVE-2025-52907 | TOTOLINK X6000R Security Bypass Vulnerability | TOTOLINK | X6000R | - | - | 2025-09-24 18:12:37 | Deep Dive |
| CVE-2025-52906 | TOTOLINK X6000R Command Injection Vulnerability | TOTOLINK | X6000R | - | - | 2025-09-24 17:44:30 | Deep Dive |
| CVE-2025-52905 | TOTOLINK X6000R Argument Injection Vulnerability | TOTOLINK | X6000R | - | - | 2025-09-23 17:53:49 | Deep Dive |
| CVE-2025-9935 | TOTOLINK N600R cstecgi.cgi sub_4159F8 command injection | TOTOLINK | N600R | High | 7.3 | 2025-09-03 23:02:10 | Deep Dive |
| CVE-2025-9934 | TOTOLINK X5000R cstecgi.cgi sub_410C34 command injection | TOTOLINK | X5000R | Medium | 6.3 | 2025-09-03 22:32:13 | Deep Dive |
| CVE-2025-9783 | TOTOLINK A702R formParentControl sub_418030 buffer overflow | TOTOLINK | A702R | High | 8.8 | 2025-09-01 14:32:07 | Deep Dive |
| CVE-2025-9782 | TOTOLINK A702R formOneKeyAccessButton sub_4466F8 buffer overflow | TOTOLINK | A702R | High | 8.8 | 2025-09-01 14:02:08 | Deep Dive |
| CVE-2025-9781 | TOTOLINK A702R formFilter sub_4162DC buffer overflow | TOTOLINK | A702R | High | 8.8 | 2025-09-01 13:32:09 | Deep Dive |