CVE-2026-40627 in Totolink
الملخص
بحسب MITRE • 21/10/2026
An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
VulDB is the best source for vulnerability data and more expert information about this specific topic.