What’s Vulnerable › Products

Totolink A7000R vulnerabilities

36 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your Totolink A7000R version is affected

Latest Totolink A7000R vulnerabilities

• CVE-2026-6168 — TOTOLINK A7000R cstecgi.cgi setWiFiEasyGuestCfg stack-based overflow (CVSS 8.8)
• CVE-2026-1623 — Totolink A7000R cstecgi.cgi setUpgradeFW command injection (CVSS 6.3)
• CVE-2026-1601 — Totolink A7000R cstecgi.cgi setUploadUserData command injection (CVSS 6.3)
• CVE-2026-1548 — Totolink A7000R cstecgi.cgi CloudACMunualUpdateUserdata command injection (CVSS 8.8)
• CVE-2026-1547 — Totolink A7000R cstecgi.cgi setUnloadUserData command injection (CVSS 9.8)
• CVE-2025-63154 — (CVSS 7.5)
• CVE-2025-63153 — (CVSS 7.5)
• CVE-2025-63459 — (CVSS 7.5)
• CVE-2025-63462 — (CVSS 7.5)
• CVE-2025-63461 — (CVSS 7.5)
• CVE-2025-63460 — (CVSS 7.5)
• CVE-2025-51452 — (CVSS 9.8)
• CVE-2024-7213 — TOTOLINK A7000R cstecgi.cgi setWizardCfg buffer overflow (CVSS 8.8)
• CVE-2024-7212 — TOTOLINK A7000R cstecgi.cgi loginauth buffer overflow (CVSS 8.8)
• CVE-2024-28640 — (CVSS 7.5)
• CVE-2024-28639 — (CVSS 9.8)
• CVE-2023-49418 — (CVSS 9.8)
• CVE-2023-49417 — (CVSS 9.8)
• CVE-2023-45985 — (CVSS 7.5)
• CVE-2023-45984 — (CVSS 9.8)
• CVE-2023-36950 — (CVSS 9.8)
• CVE-2023-36947 — (CVSS 9.8)
• CVE-2022-32993 — (CVSS 9.8)
• CVE-2022-37084 — (CVSS 7.8)
• CVE-2022-37083 — (CVSS 7.8)