Skip to content
OpenAdvisories
Critical · 9.2 CVE-2026-1723 EUVD-2026-5005GHSA-qwj2-4vw8-pgf8

TOTOLINK X6000R Unauthenticated Command Injection Vulnerability

Published Jan 30, 2026 · Updated Feb 26, 2026 · Assigned by palo_alto

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1498_B20250826.

Affected products

VendorProductAffectedFixed
TOTOLINK X6000R ≤ V9.4.0cu.1498_B20250826 —

References