By year
18
20
21
22
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Latest high and critical flaws
- CVE-2026-116508 A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104.Critical 9.3 · Oct 26, 2026
- CVE-2026-116506 A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104.High 8.6 · Oct 26, 2026
- CVE-2026-116505 A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104.High 8.5 · Oct 26, 2026
- CVE-2026-116504 A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104.High 8.6 · Oct 26, 2026
- CVE-2026-114575 A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104.Critical 9.3 · Oct 21, 2026
- CVE-2026-114383 A weakness has been identified in TOTOLINK EX200 5.2.3c.7200.Critical 9.3 · Oct 21, 2026
- CVE-2026-114382 A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200.Critical 9.3 · Oct 21, 2026
- CVE-2026-9869 A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327).Critical 9.1 · Oct 20, 2026
- CVE-2026-9827 A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327).Critical 9.1 · Oct 20, 2026
- CVE-2026-9817 A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327).Critical 9.1 · Oct 20, 2026
- CVE-2026-9814 An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327).Critical 9.1 · Oct 20, 2026
- CVE-2026-9660 Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B202Critical 9.1 · Oct 20, 2026
- CVE-2026-9659 Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B202Critical 9.1 · Oct 20, 2026
- CVE-2026-42026 Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-GhCritical 9.1 · Oct 20, 2026
- CVE-2026-42025 Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-GhCritical 9.1 · Oct 20, 2026
- CVE-2026-42024 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000Critical 9.1 · Oct 20, 2026
- CVE-2026-42023 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000Critical 9.1 · Oct 20, 2026
- CVE-2026-42022 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000Critical 9.1 · Oct 20, 2026
- CVE-2026-42021 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000Critical 9.1 · Oct 20, 2026
- CVE-2026-42020 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1Critical 9.1 · Oct 20, 2026
- CVE-2026-42019 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1Critical 9.1 · Oct 20, 2026
- CVE-2026-41223 A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1Critical 9.1 · Oct 20, 2026
- CVE-2026-41222 A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.132Critical 9.1 · Oct 20, 2026
- CVE-2026-40627 An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327.Critical 9.1 · Oct 20, 2026
- CVE-2026-40615 A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250Critical 9.1 · Oct 20, 2026
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.