CVE Intelligence

Totolink Totolink vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Totolink Totolink: 30 record(s), with affected versions and fixes.

CVE-2026-10136 Critical · 9.1 CWE-122 Oct 20, 2026
A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R...
A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-10135 Critical · 9.1 CWE-78 Oct 20, 2026
A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s):...
A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-10133 Critical · 9.1 CWE-121 Oct 20, 2026
A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R ...
A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-10132 Critical · 9.1 CWE-121 Oct 20, 2026
A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of...
A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2026-10131 Critical · 9.1 CWE-78 Oct 20, 2026
An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R...
An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.