{"cvss":0.0,"datePublished":"2026-03-11T00:00:00Z","dateUpdated":"2026-03-11T00:00:00Z","description":"A hidden remote support feature protected by a static secret in TOTOLINK N300RB firmware version 8.54 allows an authenticated attacker to execute arbitrary OS commands with root privileges.","dueDate":"","id":"CVE-2025-52089","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"n300rb_firmware","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"TOTOLINK n300rb_firmware Missing Authentication for Critical Functionality","vendor":"TOTOLINK"}