VendorsTOTOLINKn300rhall versions
Vulnerabilities

TOTOLINK N300RH

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2026-3301
Totolink N300RH Web Management cstecgi.cgi setWebWlanIdx os command injection
Published 2026-02-27 · Analyzed
10.0EPSS 0.043
CVE-2026-3696
Totolink N300RH CGI cstecgi.cgi setWiFiWpsConfig os command injection
Published 2026-03-08 · Analyzed
9.8EPSS 0.029
CVE-2025-4849
TOTOLINK N300RH cstecgi.cgi CloudACMunualUpdateUserdata command injection
Published 2025-05-18 · Analyzed
9.8EPSS 0.015
CVE-2025-4851
TOTOLINK N300RH cstecgi.cgi setUploadUserData command injection
Published 2025-05-18 · Analyzed
9.8EPSS 0.015
CVE-2025-6400
TOTOLINK N300RH HTTP POST Message formPortFw buffer overflow
Published 2025-06-21 · Analyzed
9.0EPSS 0.010
CVE-2025-4850
TOTOLINK N300RH cstecgi.cgi setUnloadUserData command injection
Published 2025-05-18 · Analyzed
6.5EPSS 0.012
CVE-2025-6401
TOTOLINK N300RH HTTP POST Message formFilter denial of service
Published 2025-06-21 · Analyzed
3.5EPSS 0.005