X6000R vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

X6

Product

X6000R

by Totolink · last CVE Jan 30, 2026

9

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 5High 3Medium 1Low 0

Severity

All severities9 Critical5 High3 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add X6000R to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-11005	9.8	1%	Sep 25	TOTOLINK X6000R Unauthenticated Command Injection Vulnerability Affected: through V9.4.0cu.1458_B20250708
CVE-2025-52906	9.8	13%	Sep 24	TOTOLINK X6000R Command Injection Vulnerability Affected: through V9.4.0cu.1360_B20241207
CVE-2024-7907	9.8	6%	Aug 18	TOTOLINK X6000R cstecgi.cgi setSyslogCfg command injection Affected: 9.4.0cu.852_20230719
CVE-2024-1781	9.8	15%	Feb 23	Totolink X6000R AX3000 shttpd cstecgi.cgi setWizardCfg command injection Affected: 9.4.0cu.852_20230719
CVE-2026-1723	9.2	1%	Jan 30	TOTOLINK X6000R Unauthenticated Command Injection Vulnerability Affected: through V9.4.0cu.1498_B20250826
CVE-2025-52907	8.8	1%	Sep 24	TOTOLINK X6000R Security Bypass Vulnerability Affected: through V9.4.0cu.1360_B20241207
CVE-2024-2353	8.8	4%	Mar 10	Totolink X6000R shttpd cstecgi.cgi setDiagnosisCfg os command injection Affected: 9.4.0cu.852_20230719
CVE-2025-52905	7.5	8%	Sep 23	TOTOLINK X6000R Argument Injection Vulnerability Affected: through V9.4.0cu.1360_B20241207
CVE-2024-1661	5.5	0%	Feb 20	Totolink X6000R shadow hard-coded credentials Affected: 9.4.0cu.852_B20230719