How many totolink WA300 CVEs are in CISA KEV?

None of totolink WA300's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of totolink WA300 are affected?

1 distinct totolink WA300 version is named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in totolink WA300 CVEs?

totolink WA300's CVEs most often map to these CWE weakness types: CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer).

How many critical totolink WA300 vulnerabilities are there?

totolink WA300 has 1 critical and 1 high-severity CVEs.

What is the average severity of totolink WA300 CVEs?

The average CVSS base score across totolink WA300's scored CVEs is 6.4.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

totolink

8 CVEs

totolink WA300 Vulnerabilities

Name: totolink WA300 vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for WA300 by totolink.

8

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

8

Public exploits

PoC or exploit code

6.4

Avg CVSS

2026–2026

Last updated May 4, 2026

Overview

totolink WA300 has 8 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 8 have a known public exploit. The average CVSS base score across scored CVEs is 6.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting totolink WA300, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of totolink WA300's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High1

Medium6

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of totolink WA300's CVEs are currently listed in CISA's KEV catalog.

Public exploits

8

8 of totolink WA300's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every totolink WA300 version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

>= 5.2cu.7112_B201902278 CVEs

Find a version

8 CVEs

Sort

Totolink WA300 cstecgi.cgi NTPSyncWithHost command injection
CVE-2026-7721
Public exploit
CWE-74
Medium · CVSS 5.3
EPSS 0.9% (57th pct)2026-05-04
Totolink WA300 POST Request cstecgi.cgi setLanguageCfg command injection
CVE-2026-7720
Public exploit
CWE-77
Medium · CVSS 5.3
EPSS 0.9% (57th pct)2026-05-04
Totolink WA300 POST Request cstecgi.cgi loginauth buffer overflow
CVE-2026-7719
Public exploit
CWE-119
Critical · CVSS 9.3
EPSS 0.6% (46th pct)2026-05-04
Totolink WA300 POST Request cstecgi.cgi setWebWlanIdx command injection
CVE-2026-7718
Public exploit
CWE-74
Medium · CVSS 5.3
EPSS 0.9% (57th pct)2026-05-04
Totolink WA300 POST Request cstecgi.cgi UploadCustomModule buffer overflow
CVE-2026-7717
Public exploit
CWE-120
High · CVSS 8.7
EPSS 0.5% (38th pct)2026-05-04
Totolink WA300 cstecgi.cgi recvUpgradeNewFw os command injection
CVE-2026-4497
Public exploit
Patch
CWE-78
Medium · CVSS 6.9
EPSS 1.9% (78th pct)2026-03-20
Totolink WA300 cstecgi.cgi setAPNetwork os command injection
CVE-2026-2167
Public exploit
CWE-78
Medium · CVSS 5.3
EPSS 2.3% (81th pct)2026-02-08
TOTOLINK WA300 cstecgi.cgi sub_401510 command injection
CVE-2026-0641
Public exploit
CWE-77
Medium · CVSS 5.3
EPSS 2.4% (82th pct)2026-01-06

Common weakness types

The CWE weakness categories most often found in totolink WA300 CVEs. Follow any weakness for its full explanation.

Other totolink products

Browse vulnerabilities for other products by totolink.

A7100RU77 CVEs x5000r72 CVEs x5000r firmware70 CVEs a3300r65 CVEs a3300r firmware64 CVEs a3002r61 CVEs a3002r firmware61 CVEs x6000r58 CVEs

All totolink vulnerabilities

Frequently asked questions

Common questions about totolink WA300 vulnerabilities.

How many CVEs does totolink WA300 have?: totolink WA300 has 8 published CVE records since 2026.
How many totolink WA300 CVEs are in CISA KEV?: None of totolink WA300's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for totolink WA300 vulnerabilities?: Yes — 8 of totolink WA300's CVEs have a known public exploit.
Which versions of totolink WA300 are affected?: 1 distinct totolink WA300 version is named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in totolink WA300 CVEs?: totolink WA300's CVEs most often map to these CWE weakness types: CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer).
How many critical totolink WA300 vulnerabilities are there?: totolink WA300 has 1 critical and 1 high-severity CVEs.
What is the average severity of totolink WA300 CVEs?: The average CVSS base score across totolink WA300's scored CVEs is 6.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track totolink WA300 vulnerabilities

Monitor new totolink WA300 vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing