What’s Vulnerable › Products

TOTOLINK X5000R vulnerabilities

73 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 26 published in the last 12 months.

Check whether your TOTOLINK X5000R version is affected

Latest TOTOLINK X5000R vulnerabilities

• CVE-2026-91853 — TOTOLINK X5000R Export Ovpn cstecgi.cgi exportOvpn os command injection (CVSS 7.4)
• CVE-2026-15204 — TOTOLINK X5000R OpenVPN Export cstecgi.cgi exportOvpn path traversal (CVSS 5.3)
• CVE-2026-8137 — Totolink X5000R formDdns sub_458E40 buffer overflow (CVSS 8.8)
• CVE-2025-67445 — (CVSS 7.5)
• CVE-2025-70327 — (CVSS 9.8)
• CVE-2025-70329 — (CVSS 8.0)
• CVE-2025-14586 — TOTOLINK X5000R cstecgi.cgi snprintf os command injection (CVSS 9.8)
• CVE-2025-13184 — Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank password (CVSS 9.8)
• CVE-2025-9934 — TOTOLINK X5000R cstecgi.cgi sub_410C34 command injection (CVSS 9.8)
• CVE-2025-25605 — (CVSS 6.5)
• CVE-2025-25604 — (CVSS 6.5)
• CVE-2024-57025 — (CVSS 6.8)
• CVE-2024-57024 — (CVSS 6.8)
• CVE-2024-57023 — (CVSS 6.8)
• CVE-2024-57022 — (CVSS 8.8)
• CVE-2024-57021 — (CVSS 8.8)
• CVE-2024-57020 — (CVSS 8.8)
• CVE-2024-57019 — (CVSS 8.8)
• CVE-2024-57018 — (CVSS 8.8)
• CVE-2024-57017 — (CVSS 8.8)
• CVE-2024-57016 — (CVSS 8.8)
• CVE-2024-57015 — (CVSS 8.8)
• CVE-2024-57014 — (CVSS 8.8)
• CVE-2024-57013 — (CVSS 8.8)
• CVE-2024-57012 — (CVSS 8.8)