Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-11005 EUVD-2025-31165GHSA-34jw-gf29-7x45

TOTOLINK X6000R Unauthenticated Command Injection Vulnerability

Published Sep 25, 2025 · Updated Sep 26, 2025 · Assigned by palo_alto

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458_B20250708.

Affected products

VendorProductAffectedFixed
TOTOLINK X6000R ≤ V9.4.0cu.1458_B20250708 —

References