CVE-2026-1723: TOTOLINK X6000R Unauthenticated Command Injection Vulnerability
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1498B20250826.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1723?
CVE-2026-1723 has a high severity rating due to its potential for remote exploitation through unauthenticated command injection.
How do I fix CVE-2026-1723?
To fix CVE-2026-1723, update the TOTOLINK X6000R firmware to a version beyond V9.4.0cu.1498_B20250826.
What is the impact of CVE-2026-1723?
The impact of CVE-2026-1723 includes the possibility for attackers to execute arbitrary OS commands remotely without authentication.
Which devices are affected by CVE-2026-1723?
CVE-2026-1723 affects the TOTOLINK X6000R model up to firmware version V9.4.0cu.1498_B20250826.
Is CVE-2026-1723 exploitable remotely?
Yes, CVE-2026-1723 is exploitable remotely since it does not require authentication to execute OS commands.