Browse all 506 CVE security advisories affecting TOTOLINK. AI-powered Chinese analysis, POCs, and references for each vulnerability.
TOTOLINK operates primarily as a manufacturer of consumer networking hardware, including wireless routers and range extenders, targeting residential and small business markets. Security audits reveal a significant volume of vulnerabilities, with 429 CVEs currently documented, indicating systemic issues in firmware development and code review processes. Historically, the most prevalent flaw classes include Remote Code Execution (RCE), Cross-Site Scripting (XSS), and privilege escalation bugs, often stemming from inadequate input validation and weak authentication mechanisms in web management interfaces. These defects frequently allow unauthenticated attackers to gain full administrative control or execute arbitrary commands on affected devices. While no single catastrophic global incident has been widely publicized, the sheer quantity of disclosed vulnerabilities suggests a consistent pattern of security negligence. Users are advised to exercise caution, as the vendor’s response to patching these critical flaws has been inconsistent, leaving many deployed units exposed to exploitation.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-82539 | TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption — A720R CWE-119 | 9.1 | Critical | 2026-08-30 |
| CVE-2025-9303 | TOTOLINK A720R cstecgi.cgi setParentalRules buffer overflow — A720R CWE-120 | 8.8 | High | 2025-08-21 |
| CVE-2025-4271 | TOTOLINK A720R cstecgi.cgi information disclosure — A720R CWE-200 | 5.3 | Medium | 2025-05-05 |
| CVE-2025-4270 | TOTOLINK A720R Config cstecgi.cgi information disclosure — A720R CWE-200 | 5.3 | Medium | 2025-05-05 |
| CVE-2025-4269 | TOTOLINK A720R Log cstecgi.cgi access control — A720R CWE-284 | 6.5 | Medium | 2025-05-05 |
| CVE-2025-4268 | TOTOLINK A720R cstecgi.cgi missing authentication — A720R CWE-306 | 5.3 | Medium | 2025-05-05 |
| CVE-2024-8869 | TOTOLINK A720R exportOvpn os command injection — A720R CWE-78 | 5.0 | Medium | 2024-09-15 |
This page lists every published CVE security advisory associated with TOTOLINK. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.