en
Severity across 7 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 7 vulnerability records affecting A7000R.
Among the 7 records analyzed by CyStack, 3 are High or Critical and 0 appear in the CISA KEV catalog.
Compare the version you run with each vulnerability and the provider guidance below. The data only includes records analyzed so far.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-6168TOTOLINK A7000R cstecgi.cgi setWiFiEasyGuestCfg stack-based overflow | Exploitation statusPublic exploit | FixNot confirmed | Published04/13/2026 | SeverityHigh |
CVE-2026-1623Totolink A7000R cstecgi.cgi setUpgradeFW command injection | Exploitation statusPublic exploit | FixYes | Published01/29/2026 | SeverityMedium |
CVE-2026-1601Totolink A7000R cstecgi.cgi setUploadUserData command injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/29/2026 | SeverityMedium |
CVE-2026-1548Totolink A7000R cstecgi.cgi CloudACMunualUpdateUserdata command injection | Exploitation statusPublic exploit | FixYes | Published01/28/2026 | SeverityMedium |
CVE-2026-1547Totolink A7000R cstecgi.cgi setUnloadUserData command injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/28/2026 | SeverityMedium |
CVE-2024-7213TOTOLINK A7000R cstecgi.cgi setWizardCfg buffer overflow | Exploitation statusPublic exploit | FixNot confirmed | Published07/30/2024 | SeverityHigh |
CVE-2024-7212TOTOLINK A7000R cstecgi.cgi loginauth buffer overflow | Exploitation statusPublic exploit | FixNot confirmed | Published07/30/2024 | SeverityHigh |
