CVE-2026-10131: Critical OS Command Injection in TOTOLINK
A stack-based buffer overflow vulnerability exists in the formFilter vpnPassword parameter of TOTOLINK X2000R version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1
Coverage
- CVE-2026-9660: Critical vulnerability in TOTOLINK X2000R
- CVE-2026-9659: Critical vulnerability in TOTOLINK X2000R
- CVE-2026-42026: Critical vulnerability in TOTOLINK X2000R
- CVE-2026-42025: Critical vulnerability in TOTOLINK X2000R
- CVE-2026-42024: Critical vulnerability in TOTOLINK X2000R
- CVE-2026-42023: Critical vulnerability in TOTOLINK X2000R
- CVE-2026-42022: Critical vulnerability in TOTOLINK X2000R
- CVE-2026-42021: Critical vulnerability in TOTOLINK X2000R
- CVE-2026-42020: Critical vulnerability in TOTOLINK X2000R
- CVE-2026-42019: Critical vulnerability in TOTOLINK X2000R
- CVE-2026-41223: Critical vulnerability in TOTOLINK X2000R
- CVE-2026-41222: Critical vulnerability in TOTOLINK X2000R
- CVE-2026-40627: Critical vulnerability in TOTOLINK X2000R
- CVE-2026-40615: Critical vulnerability in TOTOLINK X2000R
- CVE-2026-35499: Critical vulnerability in TOTOLINK X2000R
- CVE-2026-33568: Critical vulnerability in TOTOLINK X2000R
- CVE-2026-28763: Critical vulnerability in TOTOLINK X2000R
- CVE-2026-10141: Critical firmware vulnerability in TOTOLINK X2000R
- CVE-2026-10139: Critical vulnerability in TOTOLINK X2000R
- CVE-2026-10138: Critical vulnerability in TOTOLINK X2000R