What’s Vulnerable › Products

TOTOLINK T10 vulnerabilities

22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your TOTOLINK T10 version is affected

Latest TOTOLINK T10 vulnerabilities

• CVE-2025-14964 — TOTOLINK T10 cstecgi.cgi sprintf stack-based overflow (CVSS 9.8)
• CVE-2025-9533 — TOTOLINK T10 formLoginAuth.htm improper authentication (CVSS 9.8)
• CVE-2025-44655 — (CVSS 9.8)
• CVE-2025-6139 — TOTOLINK T10 shadow.sample hard-coded password (CVSS 3.9)
• CVE-2025-6138 — TOTOLINK T10 HTTP POST Request cstecgi.cgi setWizardCfg buffer overflow (CVSS 8.8)
• CVE-2025-6137 — TOTOLINK T10 HTTP POST Request cstecgi.cgi setWiFiScheduleCfg buffer overflow (CVSS 8.8)
• CVE-2025-5905 — TOTOLINK T10 POST Request cstecgi.cgi setWiFiRepeaterCfg buffer overflow (CVSS 8.8)
• CVE-2025-5904 — TOTOLINK T10 POST Request cstecgi.cgi setWiFiMeshName buffer overflow (CVSS 8.8)
• CVE-2025-5903 — TOTOLINK T10 POST Request cstecgi.cgi setWiFiAclRules buffer overflow (CVSS 8.8)
• CVE-2025-5902 — TOTOLINK T10 POST Request cstecgi.cgi setUpgradeFW buffer overflow (CVSS 8.8)
• CVE-2025-5901 — TOTOLINK T10 POST Request cstecgi.cgi UploadCustomModule buffer overflow (CVSS 8.8)
• CVE-2025-4496 — TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow (CVSS 9.8)
• CVE-2024-9001 — TOTOLINK T10 cstecgi.cgi setTracerouteCfg os command injection (CVSS 8.8)
• CVE-2024-8577 — TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setStaticDhcpRules buffer overflow (CVSS 8.8)
• CVE-2024-8576 — TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setIpPortFilterRules buffer overflow (CVSS 8.8)
• CVE-2024-8573 — TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setParentalRules buffer overflow (CVSS 8.8)
• CVE-2024-8162 — TOTOLINK T10 AC1200 Telnet Service product.ini hard-coded credentials (CVSS 9.8)
• CVE-2022-25137 — (CVSS 9.8)
• CVE-2022-25136 — (CVSS 9.8)
• CVE-2022-25132 — (CVSS 9.8)
• CVE-2022-25131 — (CVSS 9.8)
• CVE-2022-25130 — (CVSS 9.8)