Totolink WA300 vulnerabilities

5 CVEs affecting Totolink WA300, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-7721, published 2026-05-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-7721, published 2026-05-04. Medium severity, CVSS 6.3. EPSS: 1.8% chance of exploitation in the next 30 days. A security vulnerability has been detected in Totolink WA300 5.2cu.7112_B20190227. This affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument…
CVE-2026-7720, published 2026-05-04. Medium severity, CVSS 6.3. EPSS: 1.8% chance of exploitation in the next 30 days. A weakness has been identified in Totolink WA300 5.2cu.7112_B20190227. The impacted element is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. This…
CVE-2026-7718, published 2026-05-04. Medium severity, CVSS 6.3. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability was identified in Totolink WA300 5.2cu.7112_B20190227. Impacted is the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation…
CVE-2026-7719, published 2026-05-04. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. A security flaw has been discovered in Totolink WA300 5.2cu.7112_B20190227. The affected element is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The…
CVE-2026-7717, published 2026-05-04. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227. This issue affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler.…