CVE-2025-52906
Critical · 9.8CVSS
9.8
EPSS
13.5%
Published
Sep 24, 2025
CISA due date
—
The record
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360_B20241207.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|