CVE-2026-4611

High CVSS: 8.6

A flaw has been found in TOTOLINK X6000R 9.4.0cu.1360_B20241207/9.4.0cu.1498_B20250826. Affected by this issue is the function setLanCfg of the file /usr/sbin/shttpd. Executing a manipulation of the argument Hostname can lead to os command injection. The attack may be launched remotely.

Vendor

Totolink

Product

X6000r Firmware

CWE

CWE-77

Yayın Tarihi

2026-03-23 22:16:31

Güncelleme

2026-04-03 11:31:14

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-77 X6000r Firmware HIGH Totolink 2026

Referanslar

https://vuldb.com/?ctiid.352475 https://vuldb.com/?id.352475 https://vuldb.com/?submit.775642 https://www.totolink.net/

Benzer Kayıtlar

Critical

CVE-2026-31027

TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste…

Medium

CVE-2026-5178

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Affected by this issue is the func…

Medium

CVE-2026-5177

A weakness has been identified in Totolink A3300R 17.0.0cu.557_b20221024. Affected by this vulnerability is the function…

Medium

CVE-2026-5176

A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. Affected is the function setSyslogCfg of…

Medium

CVE-2026-5105

A vulnerability was detected in Totolink A3300R 17.0.0cu.557_b20221024. The affected element is the function setVpnPassC…

Medium

CVE-2026-5104

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Impacted is the function setStatic…