{"cvss":0.0,"datePublished":"2026-01-27T00:00:00Z","dateUpdated":"2026-01-27T00:00:00Z","description":"TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.","dueDate":"","id":"CVE-2025-44846","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"ca600-poe_firmware","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"TOTOLINK ca600-poe_firmware Improper Neutralization of Special Elements used in a Command","vendor":"TOTOLINK"}