{"cves":{"cve":{"cveNumber":"CVE-2026-40627","cveUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-40627"}},"description":"TOTOLINK X2000R是中国TOTOLINK公司的一款无线路由器。\n\nTOTOLINK X2000R存在命令注入漏洞。该漏洞源于boa formWsc targetAPSsid功能未能正确过滤构造命令特殊字符、命令等，攻击者可利用该漏洞导致任意代码执行。","formalWay":"目前厂商尚未发布升级程序修复该安全问题，详情见厂商官网：\r\nhttps://www.totolink.net/","isEvent":"通用软硬件漏洞","number":"CNVD-2026-43164","openTime":"2026-10-30","products":{"product":"TOTOLINK X2000R Gh-V1.0.0-B20250421.1327"},"referenceLink":"https://nvd.nist.gov/vuln/detail/CVE-2026-40627","serverity":"高","submitTime":"2026-10-28","title":"TOTOLINK X2000R操作系统命令注入漏洞（CNVD-2026-43164）"}