Advisories · Technology

Totolink A8000RU.

Every CVE that names Totolink A8000RU among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-9478 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setParentalRules os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 25 May 2026
CVE-2026-9477 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setAccessDeviceCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 25 May 2026
CVE-2026-9476 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setPasswordCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 25 May 2026
CVE-2026-9475 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setIpQosRules os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 25 May 2026
CVE-2026-9458 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setWanCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 25 May 2026
CVE-2026-9457 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi UploadFirmwareFile os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 25 May 2026
CVE-2026-9456 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setOpenVpnCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 25 May 2026
CVE-2026-9455 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi UploadOpenVpnCert os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 25 May 2026
CVE-2026-9454 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setOpenVpnCertGenerationCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 25 May 2026
CVE-2026-9436 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setL2tpServerCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 25 May 2026
CVE-2026-9435 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setQosCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 25 May 2026
CVE-2026-9434 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setWiFiWpsCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 25 May 2026
CVE-2026-9433 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setMacFilterRules os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 25 May 2026
CVE-2026-9432 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setWiFiAdvancedCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 25 May 2026
CVE-2026-9408 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setStaticDhcpRules os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 25 May 2026
CVE-2026-9407 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setFirewallType os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 24 May 2026
CVE-2026-9406 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setRemoteCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 24 May 2026
CVE-2026-9405 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setGameSpeedCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 24 May 2026
CVE-2026-9404 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setDdnsCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 24 May 2026
CVE-2026-9388 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setScheduleCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 24 May 2026
CVE-2026-9387 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setUpgradeFW os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 24 May 2026
CVE-2026-9386 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setLanguageCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 24 May 2026
CVE-2026-9385 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setTracerouteCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 24 May 2026
CVE-2026-9384 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU Web Management cstecgi.cgi setDiagnosisCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 24 May 2026
CVE-2026-7823 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU cstecgi.cgi setAppFilterCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 5 May 2026
CVE-2026-7538 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi vulnerability os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 1 May 2026
CVE-2026-7244 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setWiFiEasyGuestCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 28 Apr 2026
CVE-2026-7243 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setRadvdCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 28 Apr 2026
CVE-2026-7242 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setOpenVpnClientCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 28 Apr 2026
CVE-2026-7241 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setWiFiBasicCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 28 Apr 2026
CVE-2026-7240 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setVpnAccountCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 28 Apr 2026
CVE-2026-7204 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setPptpServerCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 28 Apr 2026
CVE-2026-7203 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setUrlFilterRules os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 28 Apr 2026
CVE-2026-7202 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setWiFiWpsStart os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 27 Apr 2026
CVE-2026-7156 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi CsteSystem os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 27 Apr 2026
CVE-2026-7155 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setLoginPasswordCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 27 Apr 2026
CVE-2026-7154 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setAdvancedInfoShow os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 27 Apr 2026
CVE-2026-7153 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setMiniuiHomeInfoShow os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 27 Apr 2026
CVE-2026-7152 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setTelnetCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 27 Apr 2026
CVE-2026-7140 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi CsteSystem os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 27 Apr 2026
CVE-2026-7139 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setWiFiAclRules os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 27 Apr 2026
CVE-2026-7138 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setNtpCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 27 Apr 2026
CVE-2026-7137 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setStorageCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 27 Apr 2026
CVE-2026-7136 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setDmzCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 27 Apr 2026
CVE-2026-7125 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setWiFiEasyCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 27 Apr 2026
CVE-2026-7124 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setIpv6LanCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 27 Apr 2026
CVE-2026-7123 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setIptvCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 27 Apr 2026
CVE-2026-7122 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setUPnPCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 27 Apr 2026
CVE-2026-7121 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setWizardCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 27 Apr 2026
CVE-2026-7037 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Totolink A8000RU CGI cstecgi.cgi setVpnPassCfg os command injection
- Totolink A8000RU
- Command injection
Not analysed yet 26 Apr 2026