What’s Vulnerable › Products

TOTOLINK X6000R vulnerabilities

59 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your TOTOLINK X6000R version is affected

Latest TOTOLINK X6000R vulnerabilities

• CVE-2026-105484 — TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection (CVSS 10.0)
• CVE-2026-4611 — TOTOLINK X6000R shttpd setLanCfg privilege escalation (CVSS 8.8)
• CVE-2025-70328 — (CVSS 8.8)
• CVE-2026-1723 — TOTOLINK X6000R Unauthenticated Command Injection Vulnerability (CVSS 9.2)
• CVE-2025-11005 — TOTOLINK X6000R Unauthenticated Command Injection Vulnerability (CVSS 9.8)
• CVE-2025-52907 — TOTOLINK X6000R Security Bypass Vulnerability (CVSS 8.8)
• CVE-2025-52906 — TOTOLINK X6000R Command Injection Vulnerability (CVSS 9.8)
• CVE-2025-52905 — TOTOLINK X6000R Argument Injection Vulnerability (CVSS 7.5)
• CVE-2025-52053 — (CVSS 9.8)
• CVE-2025-52284 — (CVSS 6.5)
• CVE-2025-25524 — (CVSS 5.1)
• CVE-2024-52723 — (CVSS 9.8)
• CVE-2024-7907 — TOTOLINK X6000R cstecgi.cgi setSyslogCfg command injection (CVSS 9.8)
• CVE-2024-2353 — Totolink X6000R shttpd cstecgi.cgi setDiagnosisCfg os command injection (CVSS 8.8)
• CVE-2024-1781 — Totolink X6000R AX3000 shttpd cstecgi.cgi setWizardCfg command injection (CVSS 9.8)
• CVE-2024-1661 — Totolink X6000R shadow hard-coded credentials (CVSS 5.5)
• CVE-2023-52040 — (CVSS 9.8)
• CVE-2023-52039 — (CVSS 9.8)
• CVE-2023-52038 — (CVSS 9.8)
• CVE-2023-52042 — (CVSS 9.8)
• CVE-2023-52041 — (CVSS 9.8)
• CVE-2023-50651 — (CVSS 9.8)
• CVE-2023-48800 — (CVSS 9.8)
• CVE-2023-48799 — (CVSS 9.8)
• CVE-2023-48801 — (CVSS 9.8)