Totolink EX200 vulnerabilities

2 CVEs affecting Totolink EX200, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-15271, published 2026-07-09.

More from Totolink.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-15271, published 2026-07-09. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 up to 20260906. Affected by this issue is some unknown functionality of the file…
• CVE-2026-11620, published 2026-06-09. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. A security flaw has been discovered in TOTOLINK EX200 4.0.3c.7646. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation results in least privilege…