CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Oct 30, 2026, 5:00 AM ET)

What this means for you

This week: 3,332 CVEs published, 225 critical, and 2 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,332; Show in the list
Critical, last 7 days: 225; Show in the list
Healthcare-tagged, last 7 days: 3; Show in the list
Known exploited (CISA KEV): 1,764; Show in the list

Showing CVEs that name the product totolink:lr350_firmware. Show all products

14 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2025-63465	High 7.5	Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_422880 function. Assigned by mitre	Oct 30, 2025
CVE-2025-63464	High 7.5	Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_42396C function. Assigned by mitre	Oct 30, 2025
CVE-2025-63463	High 7.5	Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub_4232EC function. Assigned by mitre	Oct 30, 2025
CVE-2025-63469	High 7.5	Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_421BAC function. Assigned by mitre	Oct 30, 2025
CVE-2025-63468	High 7.5	Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the sub_426EF8 function. Assigned by mitre	Oct 30, 2025
CVE-2025-63467	High 7.5	Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_425400 function. Assigned by mitre	Oct 30, 2025
CVE-2025-63466	High 7.5	Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password parameter in the sub_426EF8 function. Assigned by mitre	Oct 30, 2025
CVE-2026-1149	Medium 6.3	Totolink LR350 POST Request cstecgi.cgi setDiagnosisCfg command injection Assigned by VulDB	Jan 19, 2026
CVE-2026-1150	Medium 6.3	Totolink LR350 POST Request cstecgi.cgi setTracerouteCfg command injection Assigned by VulDB	Jan 19, 2026
CVE-2026-1155	High 8.8	Totolink LR350 cstecgi.cgi setWiFiEasyGuestCfg buffer overflow Assigned by VulDB	Jan 19, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.