Vulnerability in Totolink Range Extender Allows Device Takeover

Back Feeds.Feedburner

Vulnerability in Totolink Range Extender Allows Device Takeover

Feeds.Feedburner •Ionut Arghire • January 7, 2026

Share: View original

An error in the firmware-upload handler leads to devices starting an unauthenticated root-level Telnet service.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Totolink Range Extender Vulnerability Enables Device Takeover A vulnerability in the Totolink range extender allows unauthorized device takeover due to an error in the firmware-upload handler. This flaw leads to the activation of an unauthenticated root-level Telnet service, which can be exploited by attackers. Users are advised to restrict administrative access as no patch is currently available. 5 sources 37

Extracted Entities

Platforms (1)

Totolink Range Extender