CyberCVE

CVE-2025-52907

TOTOLINK X6000R Security Bypass Vulnerability

Severity
High 7.3
CVSS 4.0
Remote, needs privileges or user interaction what this means
Exploited
Not listed
EPSS
0.009
58.5th percentile
Discovered by
Third party
Vendor-published field
Published
Sep 24, 2025
Assigned by palo_alto

Description

Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affects X6000R: through V9.4.0cu.1360_B20241207.

Weakness: CWE-20

Affected products

Vendor Product Category Matched by

No product mapping yet — this CVE is pending taxonomy review.

Vendor-reported products (1)
  • TOTOLINK · X6000R

References

Something wrong here?