{"schema_version":1,"title":"TOTOLINK EX200 vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 4 vulnerabilities in TOTOLINK EX200: 0 in the last 7 days and 2 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-114383, was published on 21 October 2026. 2 vulnerabilities in the last four weeks, up from none in the four before. 2 critical against 0.","url":"https://junglewise.ai/threats/technologies/ex200","json_url":"https://junglewise.ai/threats/technologies/ex200.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/ex200","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":1,"all_time":4,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":2,"last_90_days":2,"last_365_days":4},"latest":[{"cve":"CVE-2026-114383","cvss":10,"slug":"cve-2026-114383-a-weakness-has-been-identified-in-totolink-ex200-5-2-3c-7200","title":"TOTOLINK EX200 stack-based buffer overflow in setWiFiAclAddConfig","severity":"critical","exploited":false,"published_at":"2026-10-21T22:16:49.077+00:00","url":"https://junglewise.ai/threats/cve-2026-114383-a-weakness-has-been-identified-in-totolink-ex200-5-2-3c-7200"},{"cve":"CVE-2026-114382","cvss":10,"slug":"cve-2026-114382-a-security-flaw-has-been-discovered-in-totolink-ex200-5-2-3c","title":"TOTOLINK EX200 stack buffer overflow in setStaticDhcpConfig","severity":"critical","exploited":false,"published_at":"2026-10-21T22:16:48.91+00:00","url":"https://junglewise.ai/threats/cve-2026-114382-a-security-flaw-has-been-discovered-in-totolink-ex200-5-2-3c"},{"cve":"CVE-2026-15271","cvss":7.5,"slug":"cve-2026-15271-totolink-multiple-devices-privilege-escalation-in-web-interface","title":"TOTOLINK multiple devices privilege escalation in Web Interface","severity":"high","exploited":false,"published_at":"2026-07-09T22:17:02.21+00:00","url":"https://junglewise.ai/threats/cve-2026-15271-totolink-multiple-devices-privilege-escalation-in-web-interface"},{"cve":"CVE-2026-11620","cvss":5.3,"slug":"cve-2026-11620-totolink-ex200-least-privilege-violation-in-vsftpd-conf","title":"TOTOLINK EX200 least privilege violation in vsftpd.conf","severity":"medium","exploited":false,"published_at":"2026-06-09T03:16:26.043+00:00","url":"https://junglewise.ai/threats/cve-2026-11620-totolink-ex200-least-privilege-violation-in-vsftpd-conf"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":2,"exploited":0,"vulnerabilities":2},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"TOTOLINK X2000r","slug":"x2000r","vulnerabilities":31,"url":"https://junglewise.ai/threats/technologies/x2000r"},{"name":"TOTOLINK A3300R","slug":"a3300r","vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/a3300r"},{"name":"TOTOLINK A3300r Firmware","slug":"a3300r-firmware","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/a3300r-firmware"},{"name":"TOTOLINK A8000RU","slug":"a8000ru","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/a8000ru"},{"name":"TOTOLINK A950RG","slug":"a950rg","vulnerabilities":14,"url":"https://junglewise.ai/threats/technologies/a950rg"},{"name":"TOTOLINK A3002MU","slug":"a3002mu","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/a3002mu"},{"name":"TOTOLINK CA300-PoE","slug":"ca300-poe","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/ca300-poe"},{"name":"TOTOLINK CA750-PoE","slug":"ca750-poe","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/ca750-poe"},{"name":"TOTOLINK A7100RU","slug":"a7100ru","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/a7100ru"},{"name":"TOTOLINK NR1800X","slug":"nr1800x","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/nr1800x"},{"name":"TOTOLINK X5000R","slug":"x5000r","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/x5000r"},{"name":"TOTOLINK A720R","slug":"a720r","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/a720r"}],"technology":{"hub":true,"name":"TOTOLINK EX200","slug":"ex200","vendor":{"hub":true,"name":"TOTOLINK","slug":"totolink","url":"https://junglewise.ai/threats/vendors/totolink"},"aliases":[],"category":"firmware","homepage":"https://www.totolink.net/home/menu/detail/menu_list/products/id/11.html","repo_url":"https://www.totolink.net/home/menu/detail/menu_listpk/30/ids/36.html","description":"Firmware for the TOTOLINK EX200 wireless range extender.","url":"https://junglewise.ai/threats/technologies/ex200"},"most_severe":[{"cve":"CVE-2026-114383","cvss":10,"slug":"cve-2026-114383-a-weakness-has-been-identified-in-totolink-ex200-5-2-3c-7200","title":"TOTOLINK EX200 stack-based buffer overflow in setWiFiAclAddConfig","severity":"critical","exploited":false,"published_at":"2026-10-21T22:16:49.077+00:00","url":"https://junglewise.ai/threats/cve-2026-114383-a-weakness-has-been-identified-in-totolink-ex200-5-2-3c-7200"},{"cve":"CVE-2026-114382","cvss":10,"slug":"cve-2026-114382-a-security-flaw-has-been-discovered-in-totolink-ex200-5-2-3c","title":"TOTOLINK EX200 stack buffer overflow in setStaticDhcpConfig","severity":"critical","exploited":false,"published_at":"2026-10-21T22:16:48.91+00:00","url":"https://junglewise.ai/threats/cve-2026-114382-a-security-flaw-has-been-discovered-in-totolink-ex200-5-2-3c"},{"cve":"CVE-2026-15271","cvss":7.5,"slug":"cve-2026-15271-totolink-multiple-devices-privilege-escalation-in-web-interface","title":"TOTOLINK multiple devices privilege escalation in Web Interface","severity":"high","exploited":false,"published_at":"2026-07-09T22:17:02.21+00:00","url":"https://junglewise.ai/threats/cve-2026-15271-totolink-multiple-devices-privilege-escalation-in-web-interface"},{"cve":"CVE-2026-11620","cvss":5.3,"slug":"cve-2026-11620-totolink-ex200-least-privilege-violation-in-vsftpd-conf","title":"TOTOLINK EX200 least privilege violation in vsftpd.conf","severity":"medium","exploited":false,"published_at":"2026-06-09T03:16:26.043+00:00","url":"https://junglewise.ai/threats/cve-2026-11620-totolink-ex200-least-privilege-violation-in-vsftpd-conf"}],"generated_at":"2026-11-12T03:07:00.164048+00:00"}