# Totolink N300RH.

Every CVE that names Totolink N300RH among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Totolink N300RH Web Management wireless.so setWiFiBasicConfig stack-based overflow](https://agentprime.io/advisories/CVE-2026-10187.md)
  `CVE-2026-10187` · CVE record: Totolink N300RH · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 May 2026 · Tags: Memory corruption
- [Totolink N300RH Web Management cstecgi.cgi setPasswordCfg os command injection](https://agentprime.io/advisories/CVE-2026-9543.md)
  `CVE-2026-9543` · CVE record: Totolink N300RH · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 May 2026 · Tags: Command injection
- [Totolink N300RH POST Request cstecgi.cgi setMacFilterRules buffer overflow](https://agentprime.io/advisories/CVE-2026-7750.md)
  `CVE-2026-7750` · CVE record: Totolink N300RH · CVSS 8.7 High · Not analysed yet · Published 4 May 2026 · Tags: Memory corruption
- [Totolink N300RH POST Request cstecgi.cgi setWanConfig buffer overflow](https://agentprime.io/advisories/CVE-2026-7749.md)
  `CVE-2026-7749` · CVE record: Totolink N300RH · CVSS 8.7 High · Not analysed yet · Published 4 May 2026 · Tags: Memory corruption
- [Totolink N300RH POST Request cstecgi.cgi setUpgradeFW buffer overflow](https://agentprime.io/advisories/CVE-2026-7748.md)
  `CVE-2026-7748` · CVE record: Totolink N300RH · CVSS 8.7 High · Not analysed yet · Published 4 May 2026 · Tags: Memory corruption
- [Totolink N300RH Parameter cstecgi.cgi loginauth buffer overflow](https://agentprime.io/advisories/CVE-2026-7747.md)
  `CVE-2026-7747` · CVE record: Totolink N300RH · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 May 2026 · Tags: Memory corruption
- [Totolink N300RH cstecgi.cgi setUploadSetting file inclusion](https://agentprime.io/advisories/CVE-2026-7633.md)
  `CVE-2026-7633` · CVE record: Totolink N300RH · CVSS 6.9 Medium · Not analysed yet · Published 2 May 2026 · Tags: Path traversal
- [Totolink N300RH upgrade.so setUpgradeUboot os command injection](https://agentprime.io/advisories/CVE-2026-6158.md)
  `CVE-2026-6158` · CVE record: Totolink N300RH · CVSS 6.9 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: Command injection
- [Totolink N300RH CGI cstecgi.cgi setWiFiWpsConfig os command injection](https://agentprime.io/advisories/CVE-2026-3696.md)
  `CVE-2026-3696` · CVE record: Totolink N300RH · CVSS 6.9 Medium · Not analysed yet · Published 8 Mar 2026 · Tags: Command injection
- [Totolink N300RH Web Management cstecgi.cgi setWebWlanIdx os command injection](https://agentprime.io/advisories/CVE-2026-3301.md)
  `CVE-2026-3301` · CVE record: Totolink N300RH · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Feb 2026 · Tags: Command injection
- [TOTOLINK N300RH HTTP POST Message formFilter denial of service](https://agentprime.io/advisories/CVE-2025-6401.md)
  `CVE-2025-6401` · CVE record: TOTOLINK N300RH · CVSS 5.1 Medium · Not analysed yet · Published 21 Jun 2025 · Tags: Denial of service
- [TOTOLINK N300RH HTTP POST Message formPortFw buffer overflow](https://agentprime.io/advisories/CVE-2025-6400.md)
  `CVE-2025-6400` · CVE record: TOTOLINK N300RH · CVSS 8.7 High · Not analysed yet · Published 21 Jun 2025 · Tags: Memory corruption
- [TOTOLINK N300RH cstecgi.cgi setUploadUserData command injection](https://agentprime.io/advisories/CVE-2025-4851.md)
  `CVE-2025-4851` · CVE record: TOTOLINK N300RH · CVSS 5.3 Medium · Not analysed yet · Published 18 May 2025 · Tags: Other injection, Command injection
- [TOTOLINK N300RH cstecgi.cgi setUnloadUserData command injection](https://agentprime.io/advisories/CVE-2025-4850.md)
  `CVE-2025-4850` · CVE record: TOTOLINK N300RH · CVSS 5.3 Medium · Not analysed yet · Published 18 May 2025 · Tags: Other injection, Command injection
- [TOTOLINK N300RH cstecgi.cgi CloudACMunualUpdateUserdata command injection](https://agentprime.io/advisories/CVE-2025-4849.md)
  `CVE-2025-4849` · CVE record: TOTOLINK N300RH · CVSS 5.3 Medium · Not analysed yet · Published 18 May 2025 · Tags: Other injection, Command injection

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=totolink-n300rh>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/totolink-n300rh/>. Everything for agents: <https://agentprime.io/llms.txt>.