Advisories · Technology

TOTOLINK X5000R.

Every CVE that names TOTOLINK X5000R among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-91853 CVE record

CVSS 5.3 Medium

TOTOLINK X5000R Export Ovpn cstecgi.cgi exportOvpn os command injection
- TOTOLINK X5000R
- Command injection
Not analysed yet 15 Sept 2026
CVE-2026-15204 CVE record

CVSS 6.9 Medium

TOTOLINK X5000R OpenVPN Export cstecgi.cgi exportOvpn path traversal
- TOTOLINK X5000R
- Path traversal
Not analysed yet 9 Jul 2026
CVE-2026-8137 CVE record

CVSS 8.7 High

Totolink X5000R formDdns sub_458E40 buffer overflow
- Totolink X5000R
- Memory corruption
Not analysed yet 8 May 2026
CVE-2025-14586 CVE record

CVSS 5.3 Medium

TOTOLINK X5000R cstecgi.cgi snprintf os command injection
- TOTOLINK X5000R
- Command injection
Not analysed yet 13 Dec 2025
CVE-2025-9934 CVE record

CVSS 5.3 Medium

TOTOLINK X5000R cstecgi.cgi sub_410C34 command injection
- TOTOLINK X5000R
- Other injection
- Command injection
Not analysed yet 3 Sept 2025
CVE-2023-6612 CVE record

CVSS 5.5 Medium

Totolink X5000R cstecgi.cgi setWizardCfg os command injection
- Totolink X5000R
- Command injection
Not analysed yet 8 Dec 2023