Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:h:totolink:x2000r:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

TOTOLINK X2000R: OS Command Injection in formPasswordSetup (CVE-2026-10131)

An OS command injection vulnerability in the TOTOLINK X2000R router allows an authenticated attacker to execute arbitrary system commands via the boa formPasswordSetup function.

X2000R +3 cve-2026-10131 command-injection network-security totolink buffer-overflow router remote-code-execution vulnerability +2
3t 4c