# TOTOLINK A8000RU vulnerabilities Source: https://junglewise.ai/threats/technologies/a8000ru Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/a8000ru.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 27 vulnerabilities in TOTOLINK A8000RU: 0 in the last 7 days and 0 in the last 90 days, 27 of them critical and 0 exploited in the wild. The most recent, CVE-2026-9478, was published on 25 May 2026. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 27 (27 critical, 0 exploited in the wild) ## About TOTOLINK A8000RU Firmware for the A8000RU AC4300 Wireless Tri-Band Gigabit Router. ## Latest TOTOLINK A8000RU vulnerabilities - [CVE-2026-9478: Totolink A8000RU OS command injection in setParentalRules](https://junglewise.ai/threats/cve-2026-9478-totolink-a8000ru-os-command-injection-in-setparentalrules) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9477: Totolink A8000RU command injection in setAccessDeviceCfg](https://junglewise.ai/threats/cve-2026-9477-totolink-a8000ru-command-injection-in-setaccessdevicecfg) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9476: Totolink A8000RU command injection in setPasswordCfg](https://junglewise.ai/threats/cve-2026-9476-totolink-a8000ru-command-injection-in-setpasswordcfg) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9475: Totolink A8000RU command injection in setIpQosRules](https://junglewise.ai/threats/cve-2026-9475-totolink-a8000ru-command-injection-in-setipqosrules) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9458: Totolink A8000RU OS command injection in setWanCfg](https://junglewise.ai/threats/cve-2026-9458-totolink-a8000ru-os-command-injection-in-setwancfg) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9457: Totolink A8000RU command injection in UploadFirmwareFile](https://junglewise.ai/threats/cve-2026-9457-totolink-a8000ru-command-injection-in-uploadfirmwarefile) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9456: Totolink A8000RU command injection in setOpenVpnCfg](https://junglewise.ai/threats/cve-2026-9456-totolink-a8000ru-command-injection-in-setopenvpncfg) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9455: Totolink A8000RU OS command injection in UploadOpenVpnCert](https://junglewise.ai/threats/cve-2026-9455-totolink-a8000ru-os-command-injection-in-uploadopenvpncert) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9454: Totolink A8000RU command injection in setOpenVpnCertGenerationCfg](https://junglewise.ai/threats/cve-2026-9454-totolink-a8000ru-command-injection-in-setopenvpncertgenerationcfg) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9436: Totolink A8000RU command injection in setL2tpServerCfg](https://junglewise.ai/threats/cve-2026-9436-totolink-a8000ru-command-injection-in-setl2tpservercfg) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9435: Totolink A8000RU command injection in setQosCfg](https://junglewise.ai/threats/cve-2026-9435-totolink-a8000ru-command-injection-in-setqoscfg) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9434: Totolink A8000RU OS command injection in setWiFiWpsCfg](https://junglewise.ai/threats/cve-2026-9434-totolink-a8000ru-os-command-injection-in-setwifiwpscfg) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9433: Totolink A8000RU command injection in setMacFilterRules](https://junglewise.ai/threats/cve-2026-9433-totolink-a8000ru-command-injection-in-setmacfilterrules) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9432: Totolink A8000RU command injection in setWiFiAdvancedCfg](https://junglewise.ai/threats/cve-2026-9432-totolink-a8000ru-command-injection-in-setwifiadvancedcfg) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9408: Totolink A8000RU command injection in setStaticDhcpRules](https://junglewise.ai/threats/cve-2026-9408-totolink-a8000ru-command-injection-in-setstaticdhcprules) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9407: Totolink A8000RU command injection in setFirewallType](https://junglewise.ai/threats/cve-2026-9407-totolink-a8000ru-command-injection-in-setfirewalltype) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9406: Totolink A8000RU command injection in setRemoteCfg](https://junglewise.ai/threats/cve-2026-9406-totolink-a8000ru-command-injection-in-setremotecfg) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9405: Totolink A8000RU command injection in setGameSpeedCfg](https://junglewise.ai/threats/cve-2026-9405-totolink-a8000ru-command-injection-in-setgamespeedcfg) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9404: Totolink A8000RU command injection in setDdnsCfg](https://junglewise.ai/threats/cve-2026-9404-totolink-a8000ru-command-injection-in-setddnscfg) (critical, CVSS 9.8, published 24 May 2026) - [CVE-2026-9388: Totolink A8000RU command injection in setScheduleCfg](https://junglewise.ai/threats/cve-2026-9388-totolink-a8000ru-command-injection-in-setschedulecfg) (critical, CVSS 9.8, published 24 May 2026) - [CVE-2026-9387: Totolink A8000RU command injection in setUpgradeFW](https://junglewise.ai/threats/cve-2026-9387-totolink-a8000ru-command-injection-in-setupgradefw) (critical, CVSS 9.8, published 24 May 2026) - [CVE-2026-9386: Totolink A8000RU command injection in setLanguageCfg](https://junglewise.ai/threats/cve-2026-9386-totolink-a8000ru-command-injection-in-setlanguagecfg) (critical, CVSS 9.8, published 24 May 2026) - [CVE-2026-9385: Totolink A8000RU command injection in setTracerouteCfg](https://junglewise.ai/threats/cve-2026-9385-totolink-a8000ru-command-injection-in-settraceroutecfg) (critical, CVSS 9.8, published 24 May 2026) - [CVE-2026-9384: Totolink A8000RU OS command injection in setDiagnosisCfg](https://junglewise.ai/threats/cve-2026-9384-totolink-a8000ru-os-command-injection-in-setdiagnosiscfg) (critical, CVSS 9.8, published 24 May 2026) - [CVE-2026-7204: Totolink A8000RU command injection in setPptpServerCfg](https://junglewise.ai/threats/cve-2026-7204-totolink-a8000ru-command-injection-in-setpptpservercfg) (critical, CVSS 9.8, published 28 Apr 2026) ## Most severe TOTOLINK A8000RU vulnerabilities - [CVE-2026-7204: Totolink A8000RU command injection in setPptpServerCfg](https://junglewise.ai/threats/cve-2026-7204-totolink-a8000ru-command-injection-in-setpptpservercfg) (critical, CVSS 9.8, published 28 Apr 2026) - [CVE-2026-7203: Totolink A8000RU command injection in setUrlFilterRules](https://junglewise.ai/threats/cve-2026-7203-totolink-a8000ru-command-injection-in-seturlfilterrules) (critical, CVSS 9.8, published 28 Apr 2026) - [CVE-2026-7202: Totolink A8000RU command injection in setWiFiWpsStart](https://junglewise.ai/threats/cve-2026-7202-totolink-a8000ru-command-injection-in-setwifiwpsstart) (critical, CVSS 9.8, published 28 Apr 2026) - [CVE-2026-9436: Totolink A8000RU command injection in setL2tpServerCfg](https://junglewise.ai/threats/cve-2026-9436-totolink-a8000ru-command-injection-in-setl2tpservercfg) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9478: Totolink A8000RU OS command injection in setParentalRules](https://junglewise.ai/threats/cve-2026-9478-totolink-a8000ru-os-command-injection-in-setparentalrules) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9477: Totolink A8000RU command injection in setAccessDeviceCfg](https://junglewise.ai/threats/cve-2026-9477-totolink-a8000ru-command-injection-in-setaccessdevicecfg) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9476: Totolink A8000RU command injection in setPasswordCfg](https://junglewise.ai/threats/cve-2026-9476-totolink-a8000ru-command-injection-in-setpasswordcfg) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9475: Totolink A8000RU command injection in setIpQosRules](https://junglewise.ai/threats/cve-2026-9475-totolink-a8000ru-command-injection-in-setipqosrules) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9458: Totolink A8000RU OS command injection in setWanCfg](https://junglewise.ai/threats/cve-2026-9458-totolink-a8000ru-os-command-injection-in-setwancfg) (critical, CVSS 9.8, published 25 May 2026) - [CVE-2026-9457: Totolink A8000RU command injection in UploadFirmwareFile](https://junglewise.ai/threats/cve-2026-9457-totolink-a8000ru-command-injection-in-uploadfirmwarefile) (critical, CVSS 9.8, published 25 May 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other TOTOLINK technologies - [TOTOLINK X2000r](https://junglewise.ai/threats/technologies/x2000r): 31 vulnerabilities - [TOTOLINK A3300R](https://junglewise.ai/threats/technologies/a3300r): 30 vulnerabilities - [TOTOLINK A3300r Firmware](https://junglewise.ai/threats/technologies/a3300r-firmware): 29 vulnerabilities - [TOTOLINK A950RG](https://junglewise.ai/threats/technologies/a950rg): 14 vulnerabilities - [TOTOLINK A3002MU](https://junglewise.ai/threats/technologies/a3002mu): 13 vulnerabilities - [TOTOLINK CA300-PoE](https://junglewise.ai/threats/technologies/ca300-poe): 9 vulnerabilities - [TOTOLINK CA750-PoE](https://junglewise.ai/threats/technologies/ca750-poe): 9 vulnerabilities - [TOTOLINK A7100RU](https://junglewise.ai/threats/technologies/a7100ru): 8 vulnerabilities - [TOTOLINK NR1800X](https://junglewise.ai/threats/technologies/nr1800x): 6 vulnerabilities - [TOTOLINK X5000R](https://junglewise.ai/threats/technologies/x5000r): 6 vulnerabilities - [TOTOLINK A720R](https://junglewise.ai/threats/technologies/a720r): 5 vulnerabilities - [TOTOLINK A720R firmware](https://junglewise.ai/threats/technologies/a720r-firmware): 4 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "TOTOLINK A8000RU vulnerabilities", https://junglewise.ai/threats/technologies/a8000ru, 12 November 2026.