How many totolink x6000r firmware CVEs are in CISA KEV?

None of totolink x6000r firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of totolink x6000r firmware are affected?

4 distinct totolink x6000r firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in totolink x6000r firmware CVEs?

totolink x6000r firmware's CVEs most often map to these CWE weakness types: CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-20 (Improper Input Validation), CWE-798 (Use of Hard-coded Credentials).

How many critical totolink x6000r firmware vulnerabilities are there?

totolink x6000r firmware has 47 critical and 5 high-severity CVEs.

What is the average severity of totolink x6000r firmware CVEs?

The average CVSS base score across totolink x6000r firmware's scored CVEs is 9.3.

totolink

56 CVEs

totolink x6000r firmware Vulnerabilities

Name: totolink x6000r firmware vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for x6000r firmware by totolink.

Total CVEs

Published

In CISA KEV

Exploited in the wild

Public exploits

PoC or exploit code

9.3

Avg CVSS

2023–2026

Last updated March 23, 2026

Overview

totolink x6000r firmware has 56 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 19 have a known public exploit. The average CVSS base score across scored CVEs is 9.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting totolink x6000r firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include x6000r.

Severity and exploitation

How the CVSS severity of totolink x6000r firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical47

High5

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of totolink x6000r firmware's CVEs are currently listed in CISA's KEV catalog.

Public exploits

19 of totolink x6000r firmware's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every totolink x6000r firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

>= 9.4.0cu.652_b2023011618 CVEs
>= 9.4.0cu.852_b202307197 CVEs
<= 9.4.0cu.1360_b202412074 CVEs
>= 9.4.0cu.1041_b202402241 CVE

Find a version

56 CVEs

Sort

TOTOLINK X6000R shttpd setLanCfg privilege escalation
CVE-2026-4611CWE-78
High · CVSS 8.6
EPSS 3.0% (86th pct)2026-03-23
TOTOLINK X6000R Unauthenticated Command Injection Vulnerability
CVE-2025-11005
Patch
CWE-78
Critical · CVSS 9.3
EPSS 1.3% (68th pct)2025-09-25
TOTOLINK X6000R Security Bypass Vulnerability
CVE-2025-52907
Patch
CWE-20
High · CVSS 7.3
EPSS 0.9% (55th pct)2025-09-24
TOTOLINK X6000R Command Injection Vulnerability
CVE-2025-52906
Public exploit
Patch
CWE-78
Critical · CVSS 9.3
EPSS 13.2% (96th pct)2025-09-24
TOTOLINK X6000R Argument Injection Vulnerability
CVE-2025-52905
Patch
CWE-20
High · CVSS 7.0
EPSS 7.8% (94th pct)2025-09-23
Critical vulnerability · 2025-09-15
CVE-2025-52053
Public exploit
CWE-77
Critical · CVSS 9.8
EPSS 4.4% (90th pct)2025-09-15
Medium vulnerability · 2025-07-29
CVE-2025-52284
Public exploit
CWE-77
Medium · CVSS 6.5
EPSS 2.2% (80th pct)2025-07-29
Medium vulnerability · 2025-02-11
CVE-2025-25524CWE-120
Medium · CVSS 5.1
EPSS 0.2% (7th pct)2025-02-11
Critical vulnerability · 2024-11-22
CVE-2024-52723CWE-78
Critical · CVSS 9.8
EPSS 1.0% (59th pct)2024-11-22
Medium vulnerability · 2024-08-18
CVE-2024-7907
Public exploit
CWE-77
Medium · CVSS 5.3
EPSS 6.2% (93th pct)2024-08-18
Totolink X6000R shttpd cstecgi.cgi setDiagnosisCfg os command injection
CVE-2024-2353
Public exploit
CWE-78
High · CVSS 8.8
EPSS 4.0% (89th pct)2024-03-10
Critical vulnerability · 2024-02-23
CVE-2024-1781
Public exploit
CWE-77
Critical · CVSS 9.8
EPSS 14.7% (96th pct)2024-02-23
Medium vulnerability · 2024-02-20
CVE-2024-1661
Public exploit
CWE-798
Medium · CVSS 5.5
EPSS 0.3% (24th pct)2024-02-20
Critical vulnerability · 2024-01-24
CVE-2023-52040
Public exploit
CWE-253
Critical · CVSS 9.8
EPSS 0.9% (55th pct)2024-01-24
Critical vulnerability · 2024-01-24
CVE-2023-52039
Public exploit
CWE-77
Critical · CVSS 9.8
EPSS 0.8% (52th pct)2024-01-24
Critical vulnerability · 2024-01-24
CVE-2023-52038
Public exploit
CWE-77
Critical · CVSS 9.8
EPSS 0.8% (52th pct)2024-01-24
Critical vulnerability · 2024-01-16
CVE-2023-52042
Public exploit
CWE-77
Critical · CVSS 9.8
EPSS 0.9% (58th pct)2024-01-16
Critical vulnerability · 2024-01-16
CVE-2023-52041
Public exploit
Critical · CVSS 9.8
EPSS 0.9% (55th pct)2024-01-16
Critical vulnerability · 2023-12-30
CVE-2023-50651
Public exploit
CWE-78
Critical · CVSS 9.8
EPSS 2.8% (85th pct)2023-12-30
Critical vulnerability · 2023-12-04
CVE-2023-48800
Critical · CVSS 9.8
EPSS 1.6% (73th pct)2023-12-04
Critical vulnerability · 2023-12-04
CVE-2023-48799
Critical · CVSS 9.8
EPSS 1.4% (70th pct)2023-12-04
Critical vulnerability · 2023-12-01
CVE-2023-48801
Public exploit
Critical · CVSS 9.8
EPSS 1.7% (75th pct)2023-12-01
Critical vulnerability · 2023-12-01
CVE-2023-43455
Critical · CVSS 9.8
EPSS 1.5% (72th pct)2023-12-01
Critical vulnerability · 2023-12-01
CVE-2023-43454
Public exploit
Critical · CVSS 9.8
EPSS 1.5% (72th pct)2023-12-01
Critical vulnerability · 2023-12-01
CVE-2023-43453
Critical · CVSS 9.8
EPSS 1.5% (72th pct)2023-12-01
Critical vulnerability · 2023-11-30
CVE-2023-48812
Public exploit
Critical · CVSS 9.8
EPSS 1.5% (72th pct)2023-11-30
Critical vulnerability · 2023-11-30
CVE-2023-48811
Critical · CVSS 9.8
EPSS 1.5% (72th pct)2023-11-30
Critical vulnerability · 2023-11-30
CVE-2023-48810
Critical · CVSS 9.8
EPSS 1.5% (72th pct)2023-11-30
Critical vulnerability · 2023-11-30
CVE-2023-48808
Critical · CVSS 9.8
EPSS 1.5% (72th pct)2023-11-30
Critical vulnerability · 2023-11-30
CVE-2023-48807
Critical · CVSS 9.8
EPSS 1.5% (72th pct)2023-11-30

Showing 30 of 56

Common weakness types

The CWE weakness categories most often found in totolink x6000r firmware CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many totolink x6000r firmware CVEs were published each year.

2023

2024

2025

2026

Other totolink products

Browse vulnerabilities for other products by totolink.

A7100RU77 CVEs x5000r72 CVEs x5000r firmware70 CVEs a3300r65 CVEs a3300r firmware64 CVEs a3002r61 CVEs a3002r firmware61 CVEs x6000r58 CVEs

All totolink vulnerabilities

Frequently asked questions

Common questions about totolink x6000r firmware vulnerabilities.

How many CVEs does totolink x6000r firmware have?: totolink x6000r firmware has 56 published CVE records since 2023.
How many totolink x6000r firmware CVEs are in CISA KEV?: None of totolink x6000r firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for totolink x6000r firmware vulnerabilities?: Yes — 19 of totolink x6000r firmware's CVEs have a known public exploit.
Which versions of totolink x6000r firmware are affected?: 4 distinct totolink x6000r firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in totolink x6000r firmware CVEs?: totolink x6000r firmware's CVEs most often map to these CWE weakness types: CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-20 (Improper Input Validation), CWE-798 (Use of Hard-coded Credentials).
How many critical totolink x6000r firmware vulnerabilities are there?: totolink x6000r firmware has 47 critical and 5 high-severity CVEs.
What is the average severity of totolink x6000r firmware CVEs?: The average CVSS base score across totolink x6000r firmware's scored CVEs is 9.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track totolink x6000r firmware vulnerabilities

Monitor new totolink x6000r firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing