Totolink · X6000R · CVE-2026-105484
A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652 B20230116. The impacted element is the function firmware check of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of the argument file name leads to os command injection. The attack may be performed from remote.