{"cvss":2.1,"datePublished":"2026-02-04T00:00:00Z","dateUpdated":"2026-02-04T00:00:00Z","description":"A vulnerability was determined in TOTOLINK X5000R 9.1.0cu.2089_B20211224. Affected by this issue is the function snprintf of the file /cgi-bin/cstecgi.cgi?action=exportOvpn&type=user. This manipulation of the argument User causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.","dueDate":"","id":"CVE-2025-14586","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"x5000r_firmware","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"LOW","source":"vulncheck_kev","title":"TOTOLINK x5000r_firmware Improper Neutralization of Special Elements used in a Command","vendor":"TOTOLINK"}