What’s Vulnerable › Products

Totolink NR1800X vulnerabilities

32 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 17 published in the last 12 months.

Check whether your Totolink NR1800X version is affected

Latest Totolink NR1800X vulnerabilities

• CVE-2026-82616 — TOTOLINK NR1800X cstecgi.cgi setUploadSetting stack-based overflow (CVSS 9.9)
• CVE-2026-82597 — TOTOLINK NR1800X cstecgi.cgi setUssd command injection (CVSS 7.4)
• CVE-2026-15701 — Totolink NR1800X lighttpd formLogout.htm Form_Logout stack-based overflow (CVSS 9.8)
• CVE-2026-7548 — Totolink NR1800X cstecgi.cgi sub_41A68C command injection (CVSS 8.8)
• CVE-2026-7546 — Totolink NR1800X lighttpd find_host_ip stack-based overflow (CVSS 9.8)
• CVE-2026-5030 — Totolink NR1800X Telnet Service cstecgi.cgi NTPSyncWithHost command injection (CVSS 9.8)
• CVE-2026-1328 — Totolink NR1800X POST Request cstecgi.cgi setWizardCfg buffer overflow (CVSS 8.8)
• CVE-2026-1327 — Totolink NR1800X POST Request cstecgi.cgi setTracerouteCfg command injection (CVSS 8.8)
• CVE-2026-1326 — Totolink NR1800X POST Request cstecgi.cgi setWanCfg command injection (CVSS 8.8)
• CVE-2025-60688 — (CVSS 6.5)
• CVE-2025-60686 — (CVSS 5.1)
• CVE-2025-60684 — (CVSS 6.5)
• CVE-2025-45845 — (CVSS 8.8)
• CVE-2025-45844 — (CVSS 8.8)
• CVE-2025-45843 — (CVSS 8.8)
• CVE-2025-45842 — (CVSS 8.8)
• CVE-2025-45841 — (CVSS 9.8)
• CVE-2024-35388 — (CVSS 8.8)
• CVE-2023-7220 — Totolink NR1800X cstecgi.cgi loginAuth stack-based overflow (CVSS 9.8)
• CVE-2023-36340 — (CVSS 9.8)
• CVE-2022-44256 — (CVSS 8.8)
• CVE-2022-41528 — (CVSS 8.8)
• CVE-2022-41527 — (CVSS 8.8)
• CVE-2022-41526 — (CVSS 8.8)
• CVE-2022-41525 — (CVSS 9.8)