X5000R
- Software type
- Operating system
- Total vulnerabilities (90 days)
- 1
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/07/2026, X5000R recorded 1 security vulnerability in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of X5000R and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-91853TOTOLINK X5000R Export Ovpn cstecgi.cgi exportOvpn os command injectionCVE-2026-15204TOTOLINK X5000R OpenVPN Export cstecgi.cgi exportOvpn path traversalCVE-2026-8137Totolink X5000R formDdns sub_458E40 buffer overflowCVE-2025-14586TOTOLINK X5000R cstecgi.cgi snprintf os command injectionCVE-2025-9934TOTOLINK X5000R cstecgi.cgi sub_410C34 command injection| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-91853TOTOLINK X5000R Export Ovpn cstecgi.cgi exportOvpn os command injection | Exploitation statusActively exploited | FixNo | Published09/15/2026 | SeverityMedium |
CVE-2026-15204TOTOLINK X5000R OpenVPN Export cstecgi.cgi exportOvpn path traversal | Exploitation statusActively exploited | FixNo | Published07/09/2026 | SeverityMedium |
CVE-2026-8137Totolink X5000R formDdns sub_458E40 buffer overflow | Exploitation statusActively exploited | FixNo | Published05/08/2026 | SeverityHigh |
CVE-2025-14586TOTOLINK X5000R cstecgi.cgi snprintf os command injection | Exploitation statusActively exploited | FixNo | Published12/13/2025 | SeverityMedium |
CVE-2025-9934TOTOLINK X5000R cstecgi.cgi sub_410C34 command injection | Exploitation statusActively exploited | FixNo | Published09/03/2025 | SeverityMedium |
CVE-2023-6612Totolink X5000R cstecgi.cgi setWizardCfg os command injection | Exploitation statusActively exploited | FixNo | Published12/08/2023 | SeverityMedium |
6 Results | Page 1 of 1