CVE-2026-1723

Critical

Published: 30/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

OS Command Injection vulnerability in TOTOLINK X6000R. The issue affects versions up to V9.4.0cu.1498_B20250826. An attacker can exploit this vulnerability to execute arbitrary system commands.

Risk Assessment

An attacker can take control of the device, execute malicious commands, potentially leading to confidentiality, integrity, and availability breaches.

Recommendation

It is recommended to update the TOTOLINK X6000R firmware to the latest version that includes security fixes. Also, restrict access to the administrative panel.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1498_B20250826.