CVE-2026-9814 in Totolinkinformación

Resumen

por MITRE • 2026-10-21

An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Talos

Reservar

2026-05-28

Divulgación

2026-10-21

Moderación

aceptado

Artículo

VDB-424077

EPSS

0.00000

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-9814
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-9814
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-9814/

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you need the next level of professionalism?

Upgrade your account now!