X6000r (Totolink) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2026-01-30. Vendor: Totolink.

CVEs of X6000r

• CVE-2026-1723 - CVSS 9.2 (critical), 2026-01-30: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This…
• CVE-2025-11005 - CVSS 9.8 (critical), 2025-09-25: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This…
• CVE-2025-52907 - CVSS 8.8 (high), 2025-09-24: Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affects X6000R: through…
• CVE-2025-52906 - CVSS 9.8 (critical), 2025-09-24: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This…
• CVE-2025-52905 - CVSS 7.5 (high), 2025-09-23: Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360_B20241207.
• CVE-2024-7907 - CVSS 9.8 (critical), 2024-08-18: A vulnerability, which was classified as critical, has been found in TOTOLINK X6000R 9.4.0cu.852_20230719. This issue affects the function setSyslogCfg of the…
• CVE-2024-2353 - CVSS 8.8 (high), 2024-03-10: A vulnerability, which was classified as critical, has been found in Totolink X6000R 9.4.0cu.852_20230719. This issue affects the function setDiagnosisCfg of…
• CVE-2024-1781 - CVSS 9.8 (critical), 2024-02-23: A vulnerability was found in Totolink X6000R AX3000 9.4.0cu.852_20230719. It has been rated as critical. This issue affects the function setWizardCfg of the…
• CVE-2024-1661 - CVSS 5.5 (medium), 2024-02-20: A vulnerability classified as problematic was found in Totolink X6000R 9.4.0cu.852_B20230719. Affected by this vulnerability is an unknown functionality of…