t
totolink
Security Risk Profile
59
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 8, 2024 to present
1000
Total CVEs
752
Critical+High
1
Exploited
751
Unpatched
Threat Assessment
Avg CVSS
7.9
Base severity
Avg EPSS
1%
Exploit probability
Unpatched
751
Critical/High
Risk Level
59/100
medium
⚠️ 1 Active Exploits🆕 2Fresh (<7d)📈 39 in Last 30 Days
Severity Distribution
Critical
379High
373Medium
205Low
43Exploit Likelihood
>50% chance
020-50%
05-20%
8<5%
511Age Distribution
Common Weaknesses (CWE)
1
Command Injection
340
2
Buffer Overflow
326
3
OS Command Injection
221
4
XSS
26
5
Code Injection
22
Most Affected Products
1. TOTOLINK T6158
2. TOTOLINK A3300R firmware69
3. TOTOLINK A3002R Firmware50
4. TOTOLINK X5000r Firmware46
5. TOTOLINK A3002R46
Recent Vulnerabilities
See more →CVE-2026-116508
CVSS 10.0critical
TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow
Oct 26, 2026🔧 No Patch
CVE-2026-116507
CVSS 5.5medium
TOTOLINK A950RG global.so getLanguageCfg information disclosure
Oct 26, 2026🔧 No Patch
CVE-2026-114575
CVSS 9.3critical
TOTOLINK A950RG product.so UploadCustomModule command injection
Oct 22, 2026🔧 No Patch
CVE-2026-114383
CVSS 9.3critical
TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow
Oct 21, 2026🔧 No Patch
CVE-2026-114382
CVSS 9.3critical
TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow
Oct 21, 2026🔧 No Patch
CVE-2026-35499
CVSS 9.1critical
Oct 20, 2026🔧 No Patch
CVE-2026-41223
CVSS 9.1critical
Oct 20, 2026🔧 No Patch
CVE-2026-28763
CVSS 9.1critical
Oct 20, 2026🔧 No Patch
CVE-2026-40627
CVSS 9.1critical
Oct 20, 2026🔧 No Patch
CVE-2026-41222
CVSS 9.1critical
Oct 20, 2026🔧 No Patch
Monitor totolink in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.