CVE-2022-26186: Totolink n600r Firmware

Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days.

TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the exportOvpn interface at cstecgi.cgi.

Affected products

• Totolink n600r Firmware: version 4.3.0cu.7570_b20200620 only

Published 2022-03-22. Last modified 2026-06-17.