CVE-2026-33568 in Totolinkinfo

Summary

by MITRE • 10/21/2026

A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsible

Talos

Reservation

04/22/2026

Disclosure

10/21/2026

Moderation

accepted

Entry

VDB-423046

CPE

20261021

CWE

CWE-78 (confirmed)

CVSS

9.1 (CNA)

EPSS

0.01043

KEV

Activities

very low

Sources

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-33568
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-33568
CVE Details	https://www.cvedetails.com/cve/CVE-2026-33568/

◂ Previous Overview Next ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!