Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

91 matches found

VulnCheck KEV
VulnCheck KEV•added 2022/04/01 12:00 a.m.•9 views

VulnCheck KEV: CVE-2022-26210

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setUpgradeFW, via the FileName...

9.8CVSS8.8AI score0.05693EPSS
SaveIn wildExploits1References10
OSV
OSV•added 2022/03/15 10:15 p.m.•9 views

CVE-2022-26210

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setUpgradeFW, via the FileName...

9.8CVSS7.5AI score0.05693EPSS
SaveExploits1References1
attackerkb
attackerkb•added 2022/03/15 10:15 p.m.•125 views

CVE-2022-26210

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setUpgradeFW, via the FileName...

9.8CVSS7.6AI score0.05693EPSS
SaveIn wildExploits1References2
Prion
Prion•added 2022/03/15 10:15 p.m.•30 views

Command injection

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setUpgradeFW, via the FileName...

7.5CVSS9.9AI score0.05693EPSS
SaveExploits1References1Affected Software6
CVE
CVE•added 2022/03/15 9:56 p.m.•330 views

CVE-2022-26210

CVE-2022-26210 is a command-injection vulnerability in Totolink routers (A830R, A3100R, A950RG, A800R, A3000RU, A810R) in the setUpgradeFW function, exploitable via the FileName parameter. The affected firmware variants (e.g., A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4....

9.8CVSS9.9AI score0.05693EPSS
SaveIn wildExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2022/03/15 12:00 a.m.•6 views

CVE-2022-26210: Improper Neutralization of Special Elements used in an OS Command

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setUpgradeFW, via the FileName...

9.8CVSS8.8AI score0.05693EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies•added 2022/03/15 12:00 a.m.•14 views

PT-2022-3854 · Totolink · Totolink A3100R +5

Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version 4.1.2cu.5137 B20200730 TOTOLINK A810R version 4.1.2cu.5182 B20201026 TOTOLINK A830R version 5.9c.4729 B20191112 TOTOLINK A3000RU version 5.9c.5185 B20201128 TOTOLINK A3100R version 4.1.2cu.5050 B20200504 TOTOLINK A950RG...

9.8CVSS10AI score0.05693EPSS
SaveExploits1References11
OSV
OSV•added 2022/02/19 12:15 a.m.•21 views

CVE-2022-25134

A command injection vulnerability in the function setUpgradeFW of TOTOLINK Technology router T6 V3Firmware T6V3V4.1.5cu.748B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet...

9.8CVSS6AI score0.02992EPSS
SaveExploits0References2
CNNVD
CNNVD•added 2022/02/19 12:00 a.m.•19 views

TotoLink routers 命令注入漏洞

TOTOLink T6 is a wireless dual-band router from China-based TotoLink. setUpgradeFW function of TOTOLink T6 is vulnerable to command injection. An attacker can exploit this vulnerability to execute arbitrary commands via specially crafted MQTT packets...

9.8CVSS6.1AI score0.02992EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2022/02/18 12:00 a.m.•8 views

CVE-2022-25134: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in the function setUpgradeFW of TOTOLINK Technology router T6 V3Firmware T6V3V4.1.5cu.748B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet...

9.8CVSS8.5AI score0.02992EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2022/02/18 12:00 a.m.•5 views

PT-2022-17091

Name of the Vulnerable Software and Affected Versions TOTOLINK Technology router T6 V3 version T6 V3 V4.1.5cu.748 B20211015 Description A command injection issue in the setUpgradeFW function allows attackers to execute arbitrary commands via a crafted MQTT packet. This can be exploited by sending...

9.8CVSS0.02992EPSS
SaveExploits0References5
Rows per page
Query Builder