{"cves":{"cve":{"cveNumber":"CVE-2026-35499","cveUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-35499"}},"description":"TOTOLINK X2000R是吉翁电子（TOTOLINK）推出的一款Wi-Fi6无线路由器。\n\nTOTOLINK X2000R存在操作系统命令注入漏洞，该漏洞源于boa formWsc peerRptPin功能未能正确过滤构造命令特殊字符、命令等，攻击者可利用该漏洞通过特制HTTP请求执行任意代码。","formalWay":"目前厂商尚未发布升级程序修复该安全问题，详情见厂商官网：\r\nhttps://www.totolink.net/","isEvent":"通用软硬件漏洞","number":"CNVD-2026-43163","openTime":"2026-10-30","products":{"product":"TOTOLINK X2000R Gh-V1.0.0-B20250421.1327"},"referenceLink":"https://nvd.nist.gov/vuln/detail/CVE-2026-35499","serverity":"高","submitTime":"2026-10-28","title":"TOTOLINK X2000R操作系统命令注入漏洞（CNVD-2026-43163）"}