T
Vendor security profile
totolink
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs90
Critical39
CISA KEV0
Public exploit68
Patch rate%0
Avg. CVSS8.5
12-month vulnerability rate
7
2
0
2
0
0
0
0
0
17
12
4
CVE KEV
CVE severity distribution
90toplam CVE
Critical39 (43%)
High34 (38%)
Medium16 (18%)
Low1 (1%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%76
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
90Unknown
Latest vulnerabilities
10.0
CVE-2026-105484
TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection
T
Patch status unknownEPSS %2
5.3
CVE-2026-105286
Totolink A3002MU File Upload formUploadFile sub_44B250 path traversal
T
Patch status unknownEPSS %0
10.0
CVE-2026-105285
Totolink A3002MU QoS Rule formIpQoS stack-based overflow
T
Patch status unknownEPSS %1
10.0
CVE-2026-105284
Totolink A3002MU Authentication Check boa sub_40FCFC improper authorization
T
Patch status unknownEPSS %1
9.4
CVE-2026-100896
TOTOLINK N150RT Web Management formWlSiteSurvey system os command injection
T
Patch status unknownEPSS %2
9.4
CVE-2026-93742
Totolink A3002MU formWsc command injection
T
Patch status unknownEPSS %2
10.0
CVE-2026-93741
Totolink A3002MU formWlWds buffer overflow
T
Patch status unknownEPSS %1
10.0
CVE-2026-93740
Totolink A3002MU formWlEncrypt buffer overflow
T
Patch status unknownEPSS %1
9.4
CVE-2026-93739
Totolink A3002MU formWlAc buffer overflow
T
Patch status unknownEPSS %1
9.4
CVE-2026-93738
Totolink A3002MU formSchedule buffer overflow
T
Patch status unknownEPSS %1