All 5 CVE vulnerabilities found in X5000R, with AI-generated Chinese analysis, references, and POCs.
Vendor: Totolink
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-15204 | TOTOLINK X5000R OpenVPN Export cstecgi.cgi exportOvpn path traversal CWE-22 | 5.3 | Medium | 2026-07-09 |
| CVE-2026-8137 | Totolink X5000R formDdns sub_458E40 buffer overflow CWE-120 | 8.8 | High | 2026-05-08 |
| CVE-2025-14586 | TOTOLINK X5000R cstecgi.cgi snprintf os command injection CWE-78 | 6.3 | Medium | 2025-12-13 |
| CVE-2025-9934 | TOTOLINK X5000R cstecgi.cgi sub_410C34 command injection CWE-77 | 6.3 | Medium | 2025-09-03 |
| CVE-2023-6612 | Totolink X5000R cstecgi.cgi setWizardCfg os command injection CWE-78 | 5.5 | Medium | 2023-12-08 |
All 5 known CVE vulnerabilities affecting X5000R with full Chinese analysis, references, and POCs where available.