Approved changes feed: RSS · Atom
cpe:2.3:a:totolink:totolink:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | Totolink (1d791497-87dc-5603-9043-4fbae21c5b8c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-35499 |
vulnerable | 2026-11-03 10:17:34.647475 |
Details available
CRITICAL (9.1)
An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2026-10-20T20:25:27.054Z
Updated: 2026-10-23T22:06:35.416Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40627 |
vulnerable | 2026-11-03 10:17:11.358057 |
Details available
CRITICAL (9.1)
An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2026-10-20T20:25:26.756Z
Updated: 2026-10-28T20:04:44.232Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40615 |
vulnerable | 2026-11-03 10:17:10.746636 |
Details available
CRITICAL (9.1)
A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2026-10-20T20:25:25.027Z
Updated: 2026-10-28T20:05:25.451Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41222 |
vulnerable | 2026-11-03 10:17:05.113191 |
Details available
CRITICAL (9.1)
A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2026-10-20T20:25:25.460Z
Updated: 2026-10-28T20:05:18.605Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41223 |
vulnerable | 2026-11-03 10:17:04.833803 |
Details available
CRITICAL (9.1)
A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2026-10-20T20:25:26.040Z
Updated: 2026-10-28T20:05:00.158Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33568 |
vulnerable | 2026-11-03 10:16:47.957539 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42023 |
vulnerable | 2026-11-03 10:16:44.761859 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42026 |
vulnerable | 2026-11-03 10:16:44.434853 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42022 |
vulnerable | 2026-11-03 10:16:44.326241 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42024 |
vulnerable | 2026-11-03 10:16:43.768557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42020 |
vulnerable | 2026-11-03 10:16:43.708007 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42019 |
vulnerable | 2026-11-03 10:16:43.342510 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42025 |
vulnerable | 2026-11-03 10:16:43.099318 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42021 |
vulnerable | 2026-11-03 10:16:43.042925 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9814 |
vulnerable | 2026-11-03 10:16:10.018165 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9660 |
vulnerable | 2026-11-03 10:16:09.926022 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9659 |
vulnerable | 2026-11-03 10:16:09.850116 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9827 |
vulnerable | 2026-11-03 10:16:09.730462 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9869 |
vulnerable | 2026-11-03 10:16:09.362663 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9817 |
vulnerable | 2026-11-03 10:16:09.297744 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10132 |
vulnerable | 2026-11-03 10:15:24.916129 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10136 |
vulnerable | 2026-11-03 10:15:24.780171 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10141 |
vulnerable | 2026-11-03 10:15:24.501051 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10133 |
vulnerable | 2026-11-03 10:15:24.299204 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10137 |
vulnerable | 2026-11-03 10:15:24.249996 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10139 |
vulnerable | 2026-11-03 10:15:24.235070 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10131 |
vulnerable | 2026-11-03 10:15:24.121420 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10135 |
vulnerable | 2026-11-03 10:15:24.061619 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10138 |
vulnerable | 2026-11-03 10:15:23.837374 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28763 |
vulnerable | 2026-11-03 10:15:18.705939 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.