https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-4496.htmlhttps://patchthecve.com/cve/CVE-2025-4496.htmlWed, 17 Jun 2026 09:33:22 +0000HIGH 8.8: A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to bufferhttps://patchthecve.com/cve/CVE-2025-28028.htmlhttps://patchthecve.com/cve/CVE-2025-28028.htmlWed, 17 Jun 2026 09:04:29 +0000HIGH 7.3: TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v5 parameter.https://patchthecve.com/cve/CVE-2025-28025.htmlhttps://patchthecve.com/cve/CVE-2025-28025.htmlWed, 17 Jun 2026 09:04:28 +0000HIGH 7.3: TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter.https://patchthecve.com/cve/CVE-2025-28036.htmlhttps://patchthecve.com/cve/CVE-2025-28036.htmlWed, 17 Jun 2026 09:04:30 +0000CRITICAL 9.8: TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.https://patchthecve.com/cve/CVE-2025-28035.htmlhttps://patchthecve.com/cve/CVE-2025-28035.htmlWed, 17 Jun 2026 09:04:30 +0000CRITICAL 9.8: TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.https://patchthecve.com/cve/CVE-2025-28029.htmlhttps://patchthecve.com/cve/CVE-2025-28029.htmlWed, 17 Jun 2026 09:04:29 +0000HIGH 7.3: TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in cstecgi.cgihttps://patchthecve.com/cve/CVE-2025-28027.htmlhttps://patchthecve.com/cve/CVE-2025-28027.htmlWed, 17 Jun 2026 09:04:29 +0000HIGH 7.3: TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to contain a buffer overflow vulnerability in downloadFile.cgi.https://patchthecve.com/cve/CVE-2025-28026.htmlhttps://patchthecve.com/cve/CVE-2025-28026.htmlWed, 17 Jun 2026 09:04:28 +0000HIGH 7.3: TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi.https://patchthecve.com/cve/CVE-2025-28034.htmlhttps://patchthecve.com/cve/CVE-2025-28034.htmlWed, 17 Jun 2026 09:04:30 +0000CRITICAL 9.8: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth remote command execution vulnerability in the NTPSyncWithHost functihttps://patchthecve.com/cve/CVE-2025-28033.htmlhttps://patchthecve.com/cve/CVE-2025-28033.htmlWed, 17 Jun 2026 09:04:29 +0000HIGH 7.3: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through thttps://patchthecve.com/cve/CVE-2025-28032.htmlhttps://patchthecve.com/cve/CVE-2025-28032.htmlWed, 17 Jun 2026 09:04:29 +0000HIGH 7.3: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpForm parahttps://patchthecve.com/cve/CVE-2025-2955.htmlhttps://patchthecve.com/cve/CVE-2025-2955.htmlWed, 17 Jun 2026 09:07:54 +0000MEDIUM 5.3: A vulnerability has been found in TOTOLINK A3000RU up to 5.9c.5185 and classified as problematic. This vulnerability affects unknown code of the file /cgi-bin/ExportIbmsConfig.sh of the component IBMS Configuration File Handler. The manipulation leads to improper access controls. The attack can be ihttps://patchthecve.com/cve/CVE-2025-2688.htmlhttps://patchthecve.com/cve/CVE-2025-2688.htmlWed, 17 Jun 2026 09:07:26 +0000MEDIUM 4.3: A vulnerability classified as problematic was found in TOTOLINK A3000RU up to 5.9c.5185. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ExportSyslog.sh of the component Syslog Configuration File Handler. The manipulation leads to improper access controls. The attack https://patchthecve.com/cve/CVE-2024-7170.htmlhttps://patchthecve.com/cve/CVE-2024-7170.htmlWed, 17 Jun 2026 08:19:29 +0000LOW 3.5: A vulnerability was found in TOTOLINK A3000RU 5.9c.5185. It has been rated as problematic. This issue affects some unknown processing of the file /web_cste/cgi-bin/product.ini. The manipulation leads to use of hard-coded password. The exploit has been disclosed to the public and may be used. The ass