Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2571▼ 296 respecto a la semana anterior
Críticas / altas1355▲ 107 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
26 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.7) | 0.71% | — | Totolink A3000ruAITotolink A3100rAITotolink A950rgAITotolink Ac1200t10AI+3 | 9/7/2026 | 3/9/2026 | A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 up to 20260906. Affected by this issue is some unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. The manipulation leads to least privilege violation. The attack may… | |
| Analizada | Alta (8.7) | 1.2% | — | Totolink A3000ru FirmwareTotolink A810r FirmwareTotolink T10 FirmwareTotolink A3100r Firmware+3 | 10/5/2025 | 17/6/2026 | A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to buffer overflow. The… | |
| Analizada | Alta (7.3) | 0.39% | — | Totolink A830r FirmwareTotolink A950rg FirmwareTotolink A3000ru FirmwareTotolink A3100r Firmware | 23/4/2025 | 17/6/2026 | TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v5 parameter. | |
| Analizada | Alta (7.3) | 0.39% | — | Totolink A830r FirmwareTotolink A950rg FirmwareTotolink A3000ru FirmwareTotolink A3100r Firmware | 23/4/2025 | 17/6/2026 | TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter. | |
| Analizada | Crítica (9.8) | 1.3% | — | Totolink A950rg FirmwareTotolink A810r FirmwareTotolink A800r FirmwareTotolink A830r Firmware+2 | 22/4/2025 | 17/6/2026 | TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter. | |
| Analizada | Crítica (9.8) | 1.3% | — | Totolink A830r FirmwareTotolink A3100r FirmwareTotolink A810r FirmwareTotolink A800r Firmware+2 | 22/4/2025 | 17/6/2026 | TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter. | |
| Analizada | Alta (7.3) | 0.39% | — | Totolink A830r FirmwareTotolink A950rg FirmwareTotolink A3000ru FirmwareTotolink A3100r Firmware | 22/4/2025 | 17/6/2026 | TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in cstecgi.cgi | |
| Analizada | Alta (7.3) | 0.39% | — | Totolink A830r FirmwareTotolink A950rg FirmwareTotolink A3000ru FirmwareTotolink A3100r Firmware | 22/4/2025 | 17/6/2026 | TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to contain a buffer overflow vulnerability in downloadFile.cgi. | |
| Analizada | Alta (7.3) | 0.39% | — | Totolink A830r FirmwareTotolink A950rg FirmwareTotolink A3000ru FirmwareTotolink A3100r Firmware | 22/4/2025 | 17/6/2026 | TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi. | |
| Analizada | Crítica (9.8) | 1.3% | — | Totolink A800r FirmwareTotolink A810r FirmwareTotolink A830r FirmwareTotolink A950rg Firmware+2 | 22/4/2025 | 17/6/2026 | TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth remote command execution vulnerability in the NTPSyncWithHost function through the… | |
| Analizada | Alta (7.3) | 0.39% | — | Totolink A800r FirmwareTotolink A810r FirmwareTotolink A830r FirmwareTotolink A950rg Firmware+2 | 22/4/2025 | 17/6/2026 | TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpTo parameter. | |
| Analizada | Alta (7.3) | 0.34% | — | Totolink A800r FirmwareTotolink A810r FirmwareTotolink A830r FirmwareTotolink A950rg Firmware+2 | 22/4/2025 | 17/6/2026 | TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpForm parameter. | |
| Analizada | Media (6.9) | 0.66% | — | Totolink A3000ru Firmware | 30/3/2025 | 17/6/2026 | A vulnerability has been found in TOTOLINK A3000RU up to 5.9c.5185 and classified as problematic. This vulnerability affects unknown code of the file /cgi-bin/ExportIbmsConfig.sh of the component IBMS Configuration File Handler. The manipulation leads to improper access controls. The attack can be initiated remotely.… | |
| Analizada | Media (5.3) | 0.54% | — | Totolink A3000ru Firmware | 24/3/2025 | 17/6/2026 | A vulnerability classified as problematic was found in TOTOLINK A3000RU up to 5.9c.5185. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ExportSyslog.sh of the component Syslog Configuration File Handler. The manipulation leads to improper access controls. The attack needs to be done… | |
| Modificada | Media (5.1) | 0.75% | — | Totolink A3000ru Firmware | 28/7/2024 | 17/6/2026 | A vulnerability was found in TOTOLINK A3000RU 5.9c.5185. It has been rated as problematic. This issue affects some unknown processing of the file /web_cste/cgi-bin/product.ini. The manipulation leads to use of hard-coded password. The exploit has been disclosed to the public and may be used. The associated identifier… | |
| Modificada | Alta (7.8) | 0.30% | — | Totolink A3000ru Firmware | 29/8/2022 | 17/6/2026 | TOTOLINK A3000RU V4.1.2cu.5185_B20201128 was discovered to contain a hardcoded password for root at /etc/shadow.sample. | |
| Modificada | Alta (7.2) | 3.3% | — | Totolink A830r FirmwareTotolink A3100r FirmwareTotolink A950rg FirmwareTotolink A800r Firmware+2 | 6/7/2022 | 17/6/2026 | Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730, Totolink A3000RU V5.9c.5185_B20201128, Totolink A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability. | |
| Modificada | Crítica (9.8) | 2.8% | — | Totolink A830r FirmwareTotolink A3100r FirmwareTotolink A950rg FirmwareTotolink A800r Firmware+2 | 15/3/2022 | 17/6/2026 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows… | |
| Modificada | Crítica (9.8) | 2.8% | — | Totolink A830r FirmwareTotolink A3100r FirmwareTotolink A950rg FirmwareTotolink A800r Firmware+2 | 15/3/2022 | 17/6/2026 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setDeviceName, via the deviceMac and… | |
| Modificada | Crítica (9.8) | 2.8% | — | Totolink A830r FirmwareTotolink A3100r FirmwareTotolink A950rg FirmwareTotolink A800r Firmware+2 | 15/3/2022 | 17/6/2026 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function CloudACMunualUpdate, via the deviceMac and… | |
| Modificada | Crítica (9.8) | 5.7% | — | Totolink A830r FirmwareTotolink A3100r FirmwareTotolink A950rg FirmwareTotolink A800r Firmware+2 | 15/3/2022 | 17/6/2026 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setUpgradeFW, via the FileName parameter. This… | |
| Modificada | Crítica (9.8) | 2.2% | — | Totolink A830r FirmwareTotolink A3100r FirmwareTotolink A950rg FirmwareTotolink A800r Firmware+2 | 15/3/2022 | 17/6/2026 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setUploadSetting, via the FileName parameter.… | |
| Modificada | Crítica (9.8) | 2.8% | — | Totolink A830r FirmwareTotolink A3100r FirmwareTotolink A950rg FirmwareTotolink A800r Firmware+2 | 15/3/2022 | 17/6/2026 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setWebWlanIdx, via the webWlanIdx parameter.… | |
| Modificada | Crítica (9.8) | 2.2% | — | Totolink A830r FirmwareTotolink A3100r FirmwareTotolink A950rg FirmwareTotolink A800r Firmware+2 | 15/3/2022 | 17/6/2026 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setDiagnosisCfg, via the ipDoamin parameter.… | |
| Modificada | Crítica (9.8) | 2.2% | — | Totolink A830r FirmwareTotolink A3100r FirmwareTotolink A950rg FirmwareTotolink A800r Firmware+2 | 15/3/2022 | 17/6/2026 | Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setLanguageCfg, via the langType parameter.… |