Totolink NR1800X Firmware vulnerabilities

27 CVEs affecting Totolink NR1800X Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-5030, published 2026-03-29.

More from Totolink.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-5030, published 2026-03-29. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. A vulnerability has been found in Totolink NR1800X 9.1.0u.6279_B20210910. This issue affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi of the component Telnet Service. The…
• CVE-2026-1326, published 2026-01-22. High severity, CVSS 8.8. EPSS: 3.5% chance of exploitation in the next 30 days. A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. This vulnerability affects the function setWanCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler.…
• CVE-2026-1327, published 2026-01-22. High severity, CVSS 8.8. EPSS: 2.9% chance of exploitation in the next 30 days. A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. This issue affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request…
• CVE-2024-35388, published 2024-05-24. High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days. TOTOLINK NR1800X v9.1.0u.6681_B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode
• CVE-2022-44256, published 2022-11-23. High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days. TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function.
• CVE-2022-41518, published 2022-10-06. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi.
• CVE-2022-41525, published 2022-10-06. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the OpModeCfg function at /cgi-bin/cstecgi.cgi.
• CVE-2023-7220, published 2024-01-09. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability was found in Totolink NR1800X 9.1.0u.6279_B20210910 and classified as critical. Affected by this issue is the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of…
• CVE-2022-41522, published 2022-10-06. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an unauthenticated stack overflow via the "main" function.
• CVE-2022-41528, published 2022-10-06. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function.

Latest

• CVE-2026-1328, published 2026-01-22. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. Impacted is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a…
• CVE-2025-60688, published 2025-11-13. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (setDefResponse…
• CVE-2025-60686, published 2025-11-13. Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days. A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.cgi binaries of ToToLink routers (A720R V4.1.5cu.614_B20230630, LR1200GB V9.1.0u.6619_B20230130, and NR1800X…
• CVE-2025-60684, published 2025-11-13. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (sub_42F32C…
• CVE-2025-45845, published 2025-05-08. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function.
• CVE-2025-45844, published 2025-05-08. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function.
• CVE-2025-45843, published 2025-05-08. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function.