cnvd-2026-43163

cnvd

Description

TOTOLINK X2000R是吉翁电子（TOTOLINK）推出的一款Wi-Fi6无线路由器。 TOTOLINK X2000R存在操作系统命令注入漏洞，该漏洞源于boa formWsc peerRptPin功能未能正确过滤构造命令特殊字符、命令等，攻击者可利用该漏洞通过特制HTTP请求执行任意代码。

Timeline

Published: unknown
Last Modified: unknown

CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2026-35499",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2026-35499"
    }
  },
  "description": "TOTOLINK X2000R是吉翁电子（TOTOLINK）推出的一款Wi-Fi6无线路由器。\n\nTOTOLINK X2000R存在操作系统命令注入漏洞，该漏洞源于boa formWsc peerRptPin功能未能正确过滤构造命令特殊字符、命令等，攻击者可利用该漏洞通过特制HTTP请求执行任意代码。",
  "formalWay": "目前厂商尚未发布升级程序修复该安全问题，详情见厂商官网：\r\nhttps://www.totolink.net/",
  "isEvent": "通用软硬件漏洞",
  "number": "CNVD-2026-43163",
  "openTime": "2026-10-30",
  "products": {
    "product": "TOTOLINK X2000R Gh-V1.0.0-B20250421.1327"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2026-35499",
  "serverity": "高",
  "submitTime": "2026-10-28",
  "title": "TOTOLINK X2000R操作系统命令注入漏洞（CNVD-2026-43163）"
}

View JSON API Download JSON

cnvd-2026-43163

Raw JSON Data