{"id":"CVE-2026-105484","title":"A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116","summary":"A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of t…","severity":"critical","cvss":10,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-77","CWE-78"],"vendor":"TOTOLINK","product":"X6000R","affected":["X6000R 9.4.0cu.652_B20230116"],"published":"2026-10-06","updated":"2026-10-06","sourceUpdated":"2026-10-06T15:04:52.637","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-105484","references":[{"url":"https://vuldb.com/cve/CVE-2026-105484","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/984434","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/413619","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/413619/cti","label":"cna@vuldb.com"},{"url":"https://www.totolink.net/","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total","timestamp":"2026-10-06T13:24:46.638835Z"},"ingestedAt":"2026-10-06T01:38:44.804Z","epss":0.02128,"epssPercentile":0.81845,"exploits":{"github":1,"githubRepos":["https://github.com/xiaobai718-ab/CVE-2026-105484"],"checkedAt":"2026-10-27T16:54:26.097Z"},"exploitAvailable":true,"slug":"CVE-2026-105484","body":"## Overview\n\nA security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of the argument file_name leads to os command injection. The attack may be performed from remote.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":67,"depthScoreParts":{"impact":55,"likelihood":0.4,"exploitation":12,"ransomware":0},"changes":[{"seq":227629,"id":"CVE-2026-105484","ts":1792683410049,"field":"exploit_available","old":"false","new":"true"}]}