15517 matches found
PT-2026-35922
Name of the Vulnerable Software and Affected Versions TOTOLINK A3002RU V3 versions prior to V3.0.0-B20220304.1804 Description A stack-based buffer overflow exists in the formMapDelDevice function. This issue occurs via the hostname parameter. A stack-based buffer overflow is a condition where a...
TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32573)
TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setRadvdCfg function in the /cgi-bin/cstecgi.cgi file, which fails to properly validate the...
TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32574)
TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setOpenVpnClientCfg function in the /cgi-bin/cstecgi.cgi file, which fails to properly validate and...
TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32555)
TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the failure of the setWiFiBasicCfg function in the /cgi-bin/cstecgi.cgi file to properly validate the...
TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32572)
TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setWiFiEasyGuestCfg function in the CGI Handler component, specifically the operation of the merge...
CVE-2026-36837
TOTOLINK A3002RU V3 = V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the hostname parameter in the formMapDelDevice function...
CVE-2026-36837
TOTOLINK A3002RU V3 (versions
CVE-2026-36841
TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice function...
TOTOLINK A3002RU 安全漏洞
TOTOLINK A3002RU is a wireless router product from TOTOLINK Corporation. Versions of TOTOLINK A3002RU such as V3.0.0-B20220304.1804 and earlier contain security vulnerabilities. These vulnerabilities stem from a stack-based buffer overflow vulnerability in the hostname parameter within the...
CVE-2026-36837: Stack-based Buffer Overflow
TOTOLINK A3002RU V3 = V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the hostname parameter in the formMapDelDevice function...
CVE-2026-36837
TOTOLINK A3002RU V3 = V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the hostname parameter in the formMapDelDevice function...
EUVD-2026-26230
TOTOLINK A3002RU V3 = V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the hostname parameter in the formMapDelDevice function...
CVE-2026-36841
TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice function...
CVE-2026-36841: Improper Neutralization of Special Elements used in a Command
TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice function...
CVE-2026-36841
The TOTOLINK N200RE V5 router is susceptible to a command injection vulnerability. The flaw exists within the formMapDelDevice function, specifically triggered through the macstr and bandstr parameters. This vulnerability allows for the improper neutralization of special elements used in commands...
PT-2026-35923
TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice function...
EUVD-2026-26231
TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice function...
TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32575)
TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the improper handling of user input in the User parameter of the setVpnAccountCfg function in the...
