CVE-2026-105484
A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116
- Risk score
- 81/100
- CVSS
- 10.0 v3.1
- Exploit chance (30 days)
- 2.1%
- Published
- 6 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of the argument file_name leads to os command injection. The attack may be performed f…
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Red
- CVSS 10.0 critical
- Remotely exploitable without logging in
References
Original description
A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of the argument file_name leads to os command injection. The attack may be performed from remote.
Last activity 6 Oct 2026. Patch Forecast updates every hour.