totolink nr1800x firmware

Name: totolink nr1800x firmware
Brand: totolink

productUS

cpe:2.3:o:totolink:nr1800x_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

7critical15high0medium0low

updated 2026-10-29

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-1326US	high8.8	3.49% (89th)	—	no fix	2026-01-22	= 9.1.0u.6279_b20210910
CVE-2026-1327US	high8.8	2.87% (87th)	—	no fix	2026-01-22	= 9.1.0u.6279_b20210910
CVE-2026-5030US	critical9.8	2.55% (85th)	—	no fix	2026-03-29	= 9.1.0u.6279_b20210910
CVE-2024-35388US	—	2.52% (85th)	—	no fix	2024-05-24	= 9.1.0u.6681_b20230703
CVE-2022-44256US	high8.8	2.21% (83rd)	—	no fix	2022-11-23	= 9.3.5u.6369_b20220309
CVE-2022-41518US	critical9.8	1.98% (81st)	—	no fix	2022-10-06	= 9.1.0u.6279_b20210910
CVE-2022-41525US	critical9.8	1.95% (80th)	—	no fix	2022-10-06	= 9.1.0u.6279_b20210910
CVE-2023-7220US	critical9.8	1.50% (74th)	—	no fix	2024-01-09	= 9.1.0u.6279_b20210910
CVE-2022-41522US	critical9.8	1.09% (65th)	—	no fix	2022-10-06	= 9.1.0u.6279_b20210910
CVE-2022-41528US	high8.8	1.06% (64th)	—	no fix	2022-10-06	= 9.1.0u.6279_b20210910
CVE-2022-41527US	high8.8	1.06% (64th)	—	no fix	2022-10-06	= 9.1.0u.6279_b20210910
CVE-2022-41526US	high8.8	1.06% (64th)	—	no fix	2022-10-06	= 9.1.0u.6279_b20210910
CVE-2022-41524US	high8.8	1.06% (64th)	—	no fix	2022-10-06	= 9.1.0u.6279_b20210910
CVE-2022-41523US	high8.8	1.06% (64th)	—	no fix	2022-10-06	= 9.1.0u.6279_b20210910
CVE-2022-41521US	high8.8	1.06% (64th)	—	no fix	2022-10-06	= 9.1.0u.6279_b20210910
CVE-2022-41520US	high8.8	1.06% (64th)	—	no fix	2022-10-06	= 9.1.0u.6279_b20210910
CVE-2022-41517US	high8.8	1.04% (64th)	—	no fix	2022-10-06	= 9.1.0u.6279_b20210910
CVE-2025-45842US	high8.8	0.91% (60th)	—	no fix	2025-05-08	= 9.1.0u.6681_b20230703
CVE-2023-36340US	critical9.8	0.85% (58th)	—	no fix	2023-10-16	= 9.1.0u.6279_b20210910
CVE-2026-1328US	—	0.84% (58th)	—	no fix	2026-01-22	= 9.1.0u.6279_b20210910
CVE-2025-45845US	high8.8	0.71% (53rd)	—	no fix	2025-05-08	= 9.1.0u.6681_b20230703
CVE-2025-45844US	high8.8	0.71% (53rd)	—	no fix	2025-05-08	= 9.1.0u.6681_b20230703
CVE-2025-45843US	high8.8	0.71% (53rd)	—	no fix	2025-05-08	= 9.1.0u.6681_b20230703
CVE-2025-60688US	—	0.55% (46th)	—	no fix	2025-11-13	= 9.1.0u.6681_b20230703
CVE-2025-60684US	—	0.55% (46th)	—	no fix	2025-11-13	= 9.1.0u.6681_b20230703
CVE-2025-45841US	critical9.8	0.53% (44th)	—	no fix	2025-05-08	= 9.1.0u.6681_b20230703
CVE-2025-60686US	—	0.24% (15th)	—	no fix	2025-11-13	= 9.1.0u.6681_b20230703

weaknesses (7)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write16 CVEs
CWE-121Stack-based Buffer Overflow10 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')3 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan