What’s Vulnerable › Products

Totolink LR350 vulnerabilities

36 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.

Check whether your Totolink LR350 version is affected

Latest Totolink LR350 vulnerabilities

• CVE-2026-4976 — Totolink LR350 cstecgi.cgi setWiFiGuestCfg buffer overflow (CVSS 8.8)
• CVE-2026-1158 — Totolink LR350 POST Request cstecgi.cgi setWizardCfg buffer overflow (CVSS 8.8)
• CVE-2026-1157 — Totolink LR350 cstecgi.cgi setWiFiEasyCfg buffer overflow (CVSS 8.8)
• CVE-2026-1156 — Totolink LR350 cstecgi.cgi setWiFiBasicCfg buffer overflow (CVSS 8.8)
• CVE-2026-1155 — Totolink LR350 cstecgi.cgi setWiFiEasyGuestCfg buffer overflow (CVSS 8.8)
• CVE-2026-1150 — Totolink LR350 POST Request cstecgi.cgi setTracerouteCfg command injection (CVSS 8.8)
• CVE-2026-1149 — Totolink LR350 POST Request cstecgi.cgi setDiagnosisCfg command injection (CVSS 8.8)
• CVE-2025-63465 — (CVSS 7.5)
• CVE-2025-63464 — (CVSS 7.5)
• CVE-2025-63463 — (CVSS 7.5)
• CVE-2025-63469 — (CVSS 7.5)
• CVE-2025-63468 — (CVSS 7.5)
• CVE-2025-63467 — (CVSS 7.5)
• CVE-2025-63466 — (CVSS 7.5)
• CVE-2024-10654 — TOTOLINK LR350 formLoginAuth.htm authorization (CVSS 9.1)
• CVE-2024-42967 — (CVSS 9.8)
• CVE-2024-7214 — TOTOLINK LR350 cstecgi.cgi setWanCfg command injection (CVSS 8.8)
• CVE-2024-36783 — (CVSS 9.8)
• CVE-2024-35387 — (CVSS 9.8)
• CVE-2024-35099 — (CVSS 9.8)
• CVE-2024-34308 — (CVSS 8.8)
• CVE-2023-37149 — (CVSS 9.8)
• CVE-2023-37148 — (CVSS 9.8)
• CVE-2023-37146 — (CVSS 9.8)
• CVE-2023-37145 — (CVSS 9.8)