Vulnerabilidades do Totolink X6000R

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Totolink X6000R: 5 registro(s), com versões afetadas e correções.

CVE-2026-105484 Crítica · 10.0 CWE-77 05/10/2026

TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection

A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of the argument file_name leads to os command injection. The attack may be performed from remote.

CVE-2026-4611 Alta · 8.8 CWE-78 23/03/2026

TOTOLINK X6000R shttpd setLanCfg privilege escalation

A flaw has been found in TOTOLINK X6000R 9.4.0cu.1360_B20241207/9.4.0cu.1498_B20250826. Affected by this issue is the function setLanCfg of the file /usr/sbin/shttpd. Executing a manipulation of the argument Hostname can lead to os command injection. The attack may be launched remotely.

CVE-2026-1723 Crítica · 9.2 CWE-78 30/01/2026

Injeção de comando do SO no TOTOLINK X6000R (CVE-2026-1723)

Neutralização imprópria de elementos especiais usados em um comando do SO ('Injeção de Comando do SO') vulnerabilidade em TOTOLINK X6000R permite Injeção de Comando do SO.Este problema afeta X6000R: até V9.4.0cu.1498_B20250826.

CVE-2025-11005 Crítica · 9.8 CWE-78 25/09/2025

TOTOLINK X6000R Unauthenticated Command Injection Vulnerability

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458_B20250708.

CVE-2025-52905 Alta · 7.5 CWE-20 23/09/2025

TOTOLINK X6000R Argument Injection Vulnerability

Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360_B20241207.