Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-4611

TOTOLINK X6000R shttpd setLanCfg privilege escalation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A flaw has been found in TOTOLINK X6000R 9.4.0cu.1360_B20241207/9.4.0cu.1498_B20250826. Affected by this issue is the function setLanCfg of the file /usr/sbin/shttpd. Executing a manipulation of the argument Hostname can lead to os command injection. The attack may be launched remotely.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TOTOLINK X6000R

  • 9.4.0cu.1360_B20241207affected
  • 9.4.0cu.1498_B20250826affected

References