Totolink n300rh vulnerabilities

8 CVEs affecting Totolink n300rh, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-10187, published 2026-05-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-10187, published 2026-05-31. Critical severity, CVSS 9.8. EPSS: 7.3% chance of exploitation in the next 30 days. A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Management Interface.…
CVE-2026-9543, published 2026-05-26. Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days. A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such…
CVE-2026-6158, published 2026-04-13. High severity, CVSS 7.3. EPSS: 2.1% chance of exploitation in the next 30 days. A flaw has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setUpgradeUboot of the file upgrade.so. This manipulation of the argument FileName causes os command injection.…
CVE-2026-7747, published 2026-05-04. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler.…
CVE-2026-7750, published 2026-05-04. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was detected in Totolink N300RH 3.2.4-B20220812. This vulnerability affects the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The…
CVE-2026-7749, published 2026-05-04. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The…
CVE-2026-7748, published 2026-05-04. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A weakness has been identified in Totolink N300RH 3.2.4-B20220812. Affected by this issue is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler.…
CVE-2026-7633, published 2026-05-02. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was identified in Totolink N300RH 6.1c.1353_B20190305. This impacts the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument FileName leads to…