What’s Vulnerable › Products

Totolink WA300 vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Totolink WA300 version is affected

Latest Totolink WA300 vulnerabilities

• CVE-2026-7721 — Totolink WA300 cstecgi.cgi NTPSyncWithHost command injection (CVSS 6.3)
• CVE-2026-7720 — Totolink WA300 POST Request cstecgi.cgi setLanguageCfg command injection (CVSS 6.3)
• CVE-2026-7719 — Totolink WA300 POST Request cstecgi.cgi loginauth buffer overflow (CVSS 9.8)
• CVE-2026-7718 — Totolink WA300 POST Request cstecgi.cgi setWebWlanIdx command injection (CVSS 6.3)
• CVE-2026-7717 — Totolink WA300 POST Request cstecgi.cgi UploadCustomModule buffer overflow (CVSS 8.8)
• CVE-2026-4497 — Totolink WA300 cstecgi.cgi recvUpgradeNewFw os command injection (CVSS 9.8)
• CVE-2026-2167 — Totolink WA300 cstecgi.cgi setAPNetwork os command injection (CVSS 8.8)
• CVE-2026-0641 — TOTOLINK WA300 cstecgi.cgi sub_401510 command injection (CVSS 8.8)