CVE-2026-105484
Received Received - Intake

Command Injection in TOTOLINK X6000R Firmware

Publication date: 2026-10-06

Last updated on: 2026-10-06

Assigner: VulDB

Description
A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of the argument file_name leads to os command injection. The attack may be performed from remote.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-06
Generated
2026-10-06
AI Q&A
2026-10-06
EPSS Evaluated
N/A
NVD
CVE-2026-105484
EUVD
EUVD-2026-92908

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
TOTOLINK X6000R 9.4.0cu.652_B20230116

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an OS command injection flaw in TOTOLINK X6000R version 9.4.0cu.652_B20230116. It exists in the firmware_check function of the file /cgi-bin/cstecgi.cgi, specifically in the UploadFirmwareFile Handler component. The issue arises from improper handling of the file_name argument, allowing attackers to inject and execute arbitrary operating system commands remotely.

Detection Guidance

To detect this vulnerability, scan for the affected TOTOLINK X6000R device on your network and check if it is running firmware version 9.4.0cu.652_B20230116. Test the /cgi-bin/cstecgi.cgi endpoint with crafted file_name arguments to see if command injection is possible.

Impact Analysis

This vulnerability allows remote attackers to execute arbitrary commands on the affected device with high privileges. This could lead to complete system compromise, unauthorized access, data theft, or disruption of services. Since the device is a network router, attackers might also use it as a foothold to pivot into other systems on the network.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements under GDPR and HIPAA. Organizations using this device may face compliance violations, potential data breaches, and regulatory penalties due to inadequate security controls protecting personal or health information.

Mitigation Strategies

Immediately disconnect the affected TOTOLINK X6000R device from the network. Check for and apply any available firmware updates from the vendor. If no update is available, consider replacing the device with a secure alternative.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-105484. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart