Totolink X5000R's (AX1800 router) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Totolink X5000R's (AX1800 router): 1 record(s), with affected versions and fixes.
CVE-2025-13184
Critical · 9.8
CWE-863 Dec 10, 2025
Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank password
Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank password on factory/reset X5000R V9.1.0u.6369_B20230113 (arbitrary command execution). Earlier versions that share the same implementation, may also be affected.