en
Severity across 7 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 7 vulnerability records affecting N600R.
Among the 7 records analyzed by CyStack, 4 are High or Critical and 0 appear in the CISA KEV catalog.
Compare the version you run with each vulnerability and the provider guidance below. The data only includes records analyzed so far.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-82555TOTOLINK N600R Authentication cstecgi.cgi loginAuth random values | Exploitation statusPublic exploit | FixNot confirmed | Published08/30/2026 | SeverityMedium |
CVE-2026-79912TOTOLINK N600R cstecgi.cgi getCurrentTime command injection | Exploitation statusPublic exploit | FixNot confirmed | Published08/25/2026 | SeverityMedium |
CVE-2026-79911TOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based overflow | Exploitation statusPublic exploit | FixNot confirmed | Published08/25/2026 | SeverityCritical |
CVE-2025-11444TOTOLINK N600R HTTP Request cstecgi.cgi setWiFiBasicConfig buffer overflow | Exploitation statusPublic exploit | FixNot confirmed | Published10/08/2025 | SeverityHigh |
CVE-2025-9935TOTOLINK N600R cstecgi.cgi sub_4159F8 command injection | Exploitation statusPublic exploit | FixNot confirmed | Published09/03/2025 | SeverityMedium |
CVE-2025-8181TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation | Exploitation statusNot known exploited | FixNot confirmed | Published07/26/2025 | SeverityHigh |
CVE-2025-4496TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow | Exploitation statusPublic exploit | FixNot confirmed | Published05/10/2025 | SeverityHigh |
