- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/07/2026, WA300 recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of WA300 and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-7721Totolink WA300 cstecgi.cgi NTPSyncWithHost command injectionCVE-2026-7720Totolink WA300 POST Request cstecgi.cgi setLanguageCfg command injectionCVE-2026-7719Totolink WA300 POST Request cstecgi.cgi loginauth buffer overflowCVE-2026-7718Totolink WA300 POST Request cstecgi.cgi setWebWlanIdx command injectionCVE-2026-7717Totolink WA300 POST Request cstecgi.cgi UploadCustomModule buffer overflow| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-7721Totolink WA300 cstecgi.cgi NTPSyncWithHost command injection | Exploitation statusActively exploited | FixNo | Published05/04/2026 | SeverityMedium |
CVE-2026-7720Totolink WA300 POST Request cstecgi.cgi setLanguageCfg command injection | Exploitation statusActively exploited | FixNo | Published05/04/2026 | SeverityMedium |
CVE-2026-7719Totolink WA300 POST Request cstecgi.cgi loginauth buffer overflow | Exploitation statusActively exploited | FixNo | Published05/04/2026 | SeverityCritical |
CVE-2026-7718Totolink WA300 POST Request cstecgi.cgi setWebWlanIdx command injection | Exploitation statusActively exploited | FixNo | Published05/04/2026 | SeverityMedium |
CVE-2026-7717Totolink WA300 POST Request cstecgi.cgi UploadCustomModule buffer overflow | Exploitation statusActively exploited | FixNo | Published05/04/2026 | SeverityHigh |
CVE-2026-4497Totolink WA300 cstecgi.cgi recvUpgradeNewFw os command injection | Exploitation statusActively exploited | FixYes | Published03/20/2026 | SeverityMedium |
CVE-2026-2167Totolink WA300 cstecgi.cgi setAPNetwork os command injection | Exploitation statusActively exploited | FixNo | Published02/08/2026 | SeverityMedium |
CVE-2026-0641TOTOLINK WA300 cstecgi.cgi sub_401510 command injection | Exploitation statusActively exploited | FixNo | Published01/06/2026 | SeverityMedium |
8 Results | Page 1 of 1