Skip to content
Threat Feed
Subscribe

Product

X2000R (<= TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327)

1 brief RSS
critical advisory

TOTOLINK X2000R: OS Command Injection in formPasswordSetup (CVE-2026-10131)

An OS command injection vulnerability in the TOTOLINK X2000R router allows an authenticated attacker to execute arbitrary system commands via the boa formPasswordSetup function.

X2000R +3 cve-2026-10131 command-injection network-security totolink buffer-overflow router remote-code-execution vulnerability +2
3t 4c