Advisories · Technology

Totolink A7100RU.

Every CVE that names Totolink A7100RU among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-6195 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Totolink A7100RU CGI cstecgi.cgi setPasswordCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 13 Apr 2026
CVE-2026-6156 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setIpQosRules os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 13 Apr 2026
CVE-2026-6155 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setWanCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 13 Apr 2026
CVE-2026-6154 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setWizardCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 13 Apr 2026
CVE-2026-6140 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi UploadFirmwareFile os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 13 Apr 2026
CVE-2026-6139 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi UploadOpenVpnCert os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 13 Apr 2026
CVE-2026-6138 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setAccessDeviceCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 13 Apr 2026
CVE-2026-6132 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setLedCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 12 Apr 2026
CVE-2026-6131 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setTracerouteCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 12 Apr 2026
CVE-2026-6116 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setDiagnosisCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 12 Apr 2026
CVE-2026-6115 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setAppCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 12 Apr 2026
CVE-2026-6114 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setNetworkCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 12 Apr 2026
CVE-2026-6113 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setTtyServiceCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 12 Apr 2026
CVE-2026-6112 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setRadvdCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 12 Apr 2026
CVE-2026-6029 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setVpnAccountCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 10 Apr 2026
CVE-2026-6028 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setPptpServerCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 10 Apr 2026
CVE-2026-6027 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setUrlFilterRules os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 10 Apr 2026
CVE-2026-6026 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setPortalConfWeChat os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 10 Apr 2026
CVE-2026-6025 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setSyslogCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 10 Apr 2026
CVE-2026-5997 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setLoginPasswordCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 10 Apr 2026
CVE-2026-5996 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setAdvancedInfoShow os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 10 Apr 2026
CVE-2026-5995 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setMiniuiHomeInfoShow os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 10 Apr 2026
CVE-2026-5994 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setTelnetCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 10 Apr 2026
CVE-2026-5993 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setWiFiGuestCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 10 Apr 2026
CVE-2026-5978 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setWiFiAclRules os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 9 Apr 2026
CVE-2026-5977 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setWiFiBasicCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 9 Apr 2026
CVE-2026-5976 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setStorageCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 9 Apr 2026
CVE-2026-5975 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A7100RU CGI cstecgi.cgi setDmzCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 9 Apr 2026
CVE-2026-5854 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Totolink A7100RU CGI cstecgi.cgi setWiFiEasyCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 9 Apr 2026
CVE-2026-5853 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Totolink A7100RU CGI cstecgi.cgi setIpv6LanCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 9 Apr 2026
CVE-2026-5852 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Totolink A7100RU CGI cstecgi.cgi setIptvCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 9 Apr 2026
CVE-2026-5851 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Totolink A7100RU CGI cstecgi.cgi setUPnPCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 9 Apr 2026
CVE-2026-5850 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Totolink A7100RU CGI cstecgi.cgi setVpnPassCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 9 Apr 2026
CVE-2026-5692 CVE record

CVSS 6.9 Medium

Totolink A7100RU cstecgi.cgi setGameSpeedCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 6 Apr 2026
CVE-2026-5691 CVE record

CVSS 6.9 Medium

Totolink A7100RU cstecgi.cgi setFirewallType os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 6 Apr 2026
CVE-2026-5690 CVE record

CVSS 6.9 Medium

Totolink A7100RU cstecgi.cgi setRemoteCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 6 Apr 2026
CVE-2026-5689 CVE record

CVSS 6.9 Medium

Totolink A7100RU cstecgi.cgi setNtpCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 6 Apr 2026
CVE-2026-5688 CVE record

CVSS 6.9 Medium

Totolink A7100RU cstecgi.cgi setDdnsCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 6 Apr 2026
CVE-2026-5678 CVE record

CVSS 6.9 Medium

Totolink A7100RU cstecgi.cgi setScheduleCfg os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 6 Apr 2026
CVE-2026-5677 CVE record

CVSS 6.9 Medium

Totolink A7100RU cstecgi.cgi CsteSystem os command injection
- Totolink A7100RU
- Command injection
Not analysed yet 6 Apr 2026
CVE-2023-7095 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Totolink A7100RU HTTP POST Request main buffer overflow
- Totolink A7100RU
- Memory corruption
Not analysed yet 25 Dec 2023
CVE-2023-6906 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Totolink A7100RU HTTP POST Request main buffer overflow
- Totolink A7100RU
- Memory corruption
Not analysed yet 18 Dec 2023