What’s Vulnerable › Products

TOTOLINK N600R vulnerabilities

41 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 16 published in the last 12 months.

Check whether your TOTOLINK N600R version is affected

Latest TOTOLINK N600R vulnerabilities

• CVE-2026-82555 — TOTOLINK N600R Authentication cstecgi.cgi loginAuth random values (CVSS 3.7)
• CVE-2026-79912 — TOTOLINK N600R cstecgi.cgi getCurrentTime command injection (CVSS 8.3)
• CVE-2026-79911 — TOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based overflow (CVSS 10.0)
• CVE-2025-60336 — (CVSS 7.5)
• CVE-2025-60335 — (CVSS 7.5)
• CVE-2025-60334 — (CVSS 7.5)
• CVE-2025-60333 — (CVSS 7.5)
• CVE-2025-11444 — TOTOLINK N600R HTTP Request cstecgi.cgi setWiFiBasicConfig buffer overflow (CVSS 8.8)
• CVE-2025-57623 — (CVSS 5.3)
• CVE-2025-9935 — TOTOLINK N600R cstecgi.cgi sub_4159F8 command injection (CVSS 9.8)
• CVE-2025-51390 — (CVSS 9.8)
• CVE-2025-8181 — TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation (CVSS 7.2)
• CVE-2025-46060 — (CVSS 9.8)
• CVE-2025-4496 — TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow (CVSS 9.8)
• CVE-2025-22903 — (CVSS 4.6)
• CVE-2025-22900 — (CVSS 9.8)
• CVE-2023-43141 — (CVSS 9.8)
• CVE-2022-36613 — (CVSS 7.8)
• CVE-2022-29399 — (CVSS 9.8)
• CVE-2022-29398 — (CVSS 9.8)
• CVE-2022-29397 — (CVSS 9.8)
• CVE-2022-29396 — (CVSS 9.8)
• CVE-2022-29395 — (CVSS 9.8)
• CVE-2022-29394 — (CVSS 9.8)
• CVE-2022-29393 — (CVSS 9.8)