Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-10131

1 brief RSS
critical advisory

TOTOLINK X2000R: OS Command Injection in formPasswordSetup (CVE-2026-10131)

An OS command injection vulnerability in the TOTOLINK X2000R router allows an authenticated attacker to execute arbitrary system commands via the boa formPasswordSetup function.

X2000R +3 cve-2026-10131 command-injection network-security totolink buffer-overflow router remote-code-execution vulnerability +2
3t 4c