CVE-2026-4611 in X6000R
摘要 (英语)
A flaw has been found in TOTOLINK X6000R 9.4.0cu.1360_B20241207/9.4.0cu.1498_B20250826. Affected by this issue is the function setLanCfg of the file /usr/sbin/shttpd. Executing a manipulation of the argument Hostname can lead to os command injection. The attack may be launched remotely.
Be aware that VulDB is the high quality source for vulnerability data.
披露
2026-03-24
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 352475 | TOTOLINK X6000R shttpd setLanCfg 权限提升 | 78 | 未定义 | 未定义 | CVE-2026-4611 |