Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1322 records

TI-2026-77031 CVE-2026-35499 · GHSA-7v54-29hj-mjq9

OS command injection in Totolink X2000R

Priority MEDIUM 44

An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01286 Published 2026-10-20 No fix listed CWE-78
Priority MEDIUM 43

An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01043 Published 2026-10-20 No fix listed CWE-78
Priority MEDIUM 43

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00737 Published 2026-10-20 No fix listed CWE-121
Priority MEDIUM 43

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00737 Published 2026-10-20 No fix listed CWE-121
Load more