X6000R
- Software type
- Operating system
- Total vulnerabilities (90 days)
- 1
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/07/2026, X6000R recorded 1 security vulnerability in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of X6000R and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-105484TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injectionCVE-2026-4611TOTOLINK X6000R shttpd setLanCfg privilege escalationCVE-2026-1723TOTOLINK X6000R Unauthenticated Command Injection VulnerabilityCVE-2025-11005TOTOLINK X6000R Unauthenticated Command Injection VulnerabilityCVE-2025-52907TOTOLINK X6000R Security Bypass Vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-105484TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection | Exploitation statusNot exploited | FixNo | Published10/06/2026 | SeverityCritical |
CVE-2026-4611TOTOLINK X6000R shttpd setLanCfg privilege escalation | Exploitation statusNot exploited | FixNo | Published03/23/2026 | SeverityHigh |
CVE-2026-1723TOTOLINK X6000R Unauthenticated Command Injection Vulnerability | Exploitation statusNot exploited | FixYes | Published01/30/2026 | SeverityCritical |
CVE-2025-11005TOTOLINK X6000R Unauthenticated Command Injection Vulnerability | Exploitation statusNot exploited | FixYes | Published09/25/2025 | SeverityCritical |
CVE-2025-52907TOTOLINK X6000R Security Bypass Vulnerability | Exploitation statusNot exploited | FixYes | Published09/24/2025 | SeverityHigh |
CVE-2025-52906TOTOLINK X6000R Command Injection Vulnerability | Exploitation statusActively exploited | FixYes | Published09/24/2025 | SeverityCritical |
CVE-2025-52905TOTOLINK X6000R Argument Injection Vulnerability | Exploitation statusNot exploited | FixYes | Published09/23/2025 | SeverityHigh |
CVE-2024-7907TOTOLINK X6000R cstecgi.cgi setSyslogCfg command injection | Exploitation statusActively exploited | FixNo | Published08/18/2024 | SeverityMedium |
CVE-2024-2353Totolink X6000R shttpd cstecgi.cgi setDiagnosisCfg os command injection | Exploitation statusActively exploited | FixNo | Published03/10/2024 | SeverityHigh |
CVE-2024-1661Totolink X6000R shadow hard-coded credentials | Exploitation statusActively exploited | FixNo | Published02/20/2024 | SeverityLow |
10 Results | Page 1 of 1