en
Severity across 1 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 9 vulnerability records affecting X6000R.
Among the 1 records analyzed by CyStack, 1 are High or Critical and 0 appear in the CISA KEV catalog.
Compare the version you run with each vulnerability and the provider guidance below. The data only includes records analyzed so far.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-4611TOTOLINK X6000R shttpd setLanCfg privilege escalation | Exploitation statusNot known exploited | FixNot confirmed | Published03/23/2026 | SeverityHigh |
CVE-2026-1723TOTOLINK X6000R Unauthenticated Command Injection Vulnerability | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityCritical |
CVE-2025-11005TOTOLINK X6000R Unauthenticated Command Injection Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/25/2025 | SeverityCritical |
CVE-2025-52907TOTOLINK X6000R Security Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/24/2025 | SeverityHigh |
CVE-2025-52906TOTOLINK X6000R Command Injection Vulnerability | Exploitation statusPublic exploit | FixYes | Published09/24/2025 | SeverityCritical |
CVE-2025-52905TOTOLINK X6000R Argument Injection Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/23/2025 | SeverityHigh |
CVE-2024-7907TOTOLINK X6000R cstecgi.cgi setSyslogCfg command injection | Exploitation statusPublic exploit | FixNot confirmed | Published08/18/2024 | SeverityMedium |
CVE-2024-2353Totolink X6000R shttpd cstecgi.cgi setDiagnosisCfg os command injection | Exploitation statusPublic exploit | FixNot confirmed | Published03/10/2024 | SeverityHigh |
CVE-2024-1661Totolink X6000R shadow hard-coded credentials | Exploitation statusPublic exploit | FixNot confirmed | Published02/20/2024 | SeverityLow |
