https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-2370.htmlhttps://patchthecve.com/cve/CVE-2025-2370.htmlWed, 17 Jun 2026 09:06:51 +0000HIGH 8.8: A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been declared as critical. Affected by this vulnerability is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliSsid leads to stack-based buffer overflow. The athttps://patchthecve.com/cve/CVE-2025-2369.htmlhttps://patchthecve.com/cve/CVE-2025-2369.htmlWed, 17 Jun 2026 09:06:51 +0000HIGH 8.8: A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been classified as critical. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument admpass leads to stack-based buffer overflow. It is possible to launch the attackhttps://patchthecve.com/cve/CVE-2025-2097.htmlhttps://patchthecve.com/cve/CVE-2025-2097.htmlWed, 17 Jun 2026 09:06:19 +0000HIGH 8.8: A vulnerability, which was classified as critical, has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This issue affects the function setRptWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument loginpass leads to stack-based buffer overflow. The attack may be initiatedhttps://patchthecve.com/cve/CVE-2025-2096.htmlhttps://patchthecve.com/cve/CVE-2025-2096.htmlWed, 17 Jun 2026 09:06:19 +0000MEDIUM 6.3: A vulnerability classified as critical was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affects the function setRebootScheCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mode/week/minute/recHour leads to os command injection. The attack can be initiatedhttps://patchthecve.com/cve/CVE-2025-2095.htmlhttps://patchthecve.com/cve/CVE-2025-2095.htmlWed, 17 Jun 2026 09:06:19 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to os command injection. It is possible to initiate the attack remotely. The exploit has bhttps://patchthecve.com/cve/CVE-2025-2094.htmlhttps://patchthecve.com/cve/CVE-2025-2094.htmlWed, 17 Jun 2026 09:06:18 +0000MEDIUM 6.3: A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. It has been rated as critical. Affected by this issue is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliKey/key leads to os command injection. The attack may be launched https://patchthecve.com/cve/CVE-2025-1852.htmlhttps://patchthecve.com/cve/CVE-2025-1852.htmlWed, 17 Jun 2026 08:39:53 +0000HIGH 8.8: A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112_B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The explhttps://patchthecve.com/cve/CVE-2024-12352.htmlhttps://patchthecve.com/cve/CVE-2024-12352.htmlWed, 17 Jun 2026 06:59:33 +0000MEDIUM 4.3: A vulnerability classified as problematic was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affects the function sub_40662C of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be initiated remotely. The ehttps://patchthecve.com/cve/CVE-2024-34257.htmlhttps://patchthecve.com/cve/CVE-2024-34257.htmlWed, 17 Jun 2026 07:33:09 +0000CRITICAL 9.8: TOTOLINK EX1800T V9.1.0cu.2112_B20220316 has a vulnerability in the apcliEncrypType parameter that allows unauthorized execution of arbitrary commands, allowing an attacker to obtain device administrator privileges.