Login Request a demo
X6
Product
X6000R
by TOTOLINK · last CVE Oct 6, 2026
58
CVEs
0
On KEV
10.0
Max CVSS
1
New 30D
Vulnerabilities58In the news0Timeline
Severity mix
Critical 49High 6Medium 3Low 0
Severity
All severities58Critical49High6Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add X6000R to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-4611
8.8
3%
Mar 23
TOTOLINK X6000R shttpd setLanCfg privilege escalation
Affected: 9.4.0cu.1360_B20241207; 9.4.0cu.1498_B20250826
CVE-2025-70328
8.8
2%
Feb 23
TOTOLINK X6000R v9.4.0cu.1498_B20250826 contains an OS command injection vulnerability in the NTPSyncWithHost handler of the /usr/sbin/shttpd executable
Affected: 9.4.0cu.1498_b20250826
CVE-2025-52907
8.8
1%
Sep 24
TOTOLINK X6000R Security Bypass Vulnerability
Affected: through 9.4.0cu.1360_b20241207
CVE-2024-2353
8.8
4%
Mar 10
A vulnerability, which was classified as critical, has been found in Totolink X6000R 9.4.0cu.852_20230719
Affected: 9.4.0cu.852_b20230719
CVE-2025-52905
7.5
8%
Sep 23
TOTOLINK X6000R Argument Injection Vulnerability
Affected: through 9.4.0cu.1360_b20241207
CVE-2023-46978
7.5
1%
Oct 31
TOTOLINK X6000R V9.4.0cu.852_B20230719 is vulnerable to Incorrect Access Control.Attackers can reset login password & WIFI passwords without authentication
Affected: 9.4.0cu.852_b20230719
Showing 6