X6000R vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

X6

Product

X6000R

by TOTOLINK · last CVE Oct 6, 2026

58

CVEs

0

On KEV

10.0

Max CVSS

1

New 30D

Vulnerabilities58 In the news0 Timeline

Severity mix

Critical 49High 6Medium 3Low 0

Severity

All severities58 Critical49 High6 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add X6000R to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-70328	8.8	2%	Feb 23	TOTOLINK X6000R v9.4.0cu.1498_B20250826 contains an OS command injection vulnerability in the NTPSyncWithHost handler of the /usr/sbin/shttpd executable Affected: 9.4.0cu.1498_b20250826
CVE-2025-52907	8.8	1%	Sep 24	TOTOLINK X6000R Security Bypass Vulnerability Affected: through 9.4.0cu.1360_b20241207
CVE-2024-2353	8.8	4%	Mar 10	A vulnerability, which was classified as critical, has been found in Totolink X6000R 9.4.0cu.852_20230719 Affected: 9.4.0cu.852_b20230719
CVE-2025-52905	7.5	8%	Sep 23	TOTOLINK X6000R Argument Injection Vulnerability Affected: through 9.4.0cu.1360_b20241207
CVE-2023-46978	7.5	1%	Oct 31	TOTOLINK X6000R V9.4.0cu.852_B20230719 is vulnerable to Incorrect Access Control.Attackers can reset login password & WIFI passwords without authentication Affected: 9.4.0cu.852_b20230719
CVE-2025-52284	6.5	2%	Jul 29	Totolink X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_4184C0 function via the tz parameter Affected: 9.4.0cu.1360_b20241207
CVE-2024-1661	5.5	0%	Feb 20	A vulnerability classified as problematic was found in Totolink X6000R 9.4.0cu.852_B20230719 Affected: 9.4.0cu.852_b20230719
CVE-2025-25524	5.1	0%	Feb 11	Buffer overflow vulnerability in TOTOLink X6000R routers V9.4.0cu.652_B20230116 due to the lack of length verification, which is related to the addition of Wi-Fi filtering rules Affected: 9.4.0cu.652_b20230116