Totolink n600r vulnerabilities

3 CVEs affecting Totolink n600r, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-82555, published 2026-08-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-79912, published 2026-08-25. High severity, CVSS 8.3. EPSS: 2.1% chance of exploitation in the next 30 days. A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is the function getCurrentTime of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument…
CVE-2026-79911, published 2026-08-25. Critical severity, CVSS 10.0. EPSS: 1.1% chance of exploitation in the next 30 days. A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the component CGI…
CVE-2026-82555, published 2026-08-30. Low severity, CVSS 3.7. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability has been found in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function loginAuth of the file /web_cste/cgi-bin/cstecgi.cgi of the component Authentication…