← Back to browse · API

CVE-2025-52906

Severity
CRITICAL
CVSS
9.3
EPSS
0.13164
Risk score
41.81
CISA KEV
No
PoC
No
Published
2025-09-24
Modified
2025-09-24
First seen
2026-08-07
Aliases
EUVD-2025-31021, GHSA-9VW4-PMG2-63M3
Products
Totolink:X6000R 0 ≤V9.4.0cu.1360_B20241207
Sources
euvd EUVD-2025-31021

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360_B20241207.

References