TOTOLINK EX200 Extender Vulnerability Allow Attacker to Gain Full System Access

Cybersecuritynews •Abinaya • January 7, 2026

A severe vulnerability in the TOTOLINK EX200 Wi-Fi extender could allow attackers to gain full system access via an unauthenticated telnet root service, researchers warned. The flaw, tracked as CVE-2025-65606 and assigned CERT Vulnerability Note VU#295169, affects the firmware upload error-handling logic in the End-of-Life TOTOLINK EX200 extender. When processing malformed firmware files, the device inadvertently enables […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Totolink Range Extender Vulnerability Enables Device Takeover A vulnerability in the Totolink range extender allows unauthorized device takeover due to an error in the firmware-upload handler. This flaw leads to the activation of an unauthenticated root-level Telnet service, which can be exploited by attackers. Users are advised to restrict administrative access as no patch is currently available. 5 sources 37

Extracted Entities

TOTOLINK EX200 Extender Vulnerability Allow Attacker to Gain Full System Access

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)

Tools (1)