PULSE
ENPT
FEED
ransomqilin reclama a Kayaku Safety Systems Malaysia Sdn Bhd · MY · Manufacturingransomscarlettgroup reclama a fittleworth.com · GB · Retail & E-Commerceransombarracuda reclama a FINSA · ES · Financial Servicesransomnetrunner reclama a F***** G****** C********** C*** · USransomendzone reclama a Momentum Telecom · Technologyransomendzone reclama a Absolute Bail Bonds · US · Financial Servicesransomeverest reclama a Grundbaulabor Trier GmbH · DE · Manufacturingransomnetrunner reclama a I****** A***** · KWransominterlock reclama a K&A Industries · USransomeverest reclama a Final Notice Before Publication · Otherransompanzer reclama a RE/MAX Germany · DE · Professional Servicesransomcurious worm reclama a i*t*r***t.com · Technologyransomcurious worm reclama a t**a.comransomplay reclama a Frey Properties of Highland LLC · US · Retail & E-Commerceransomqilin reclama a Kayaku Safety Systems Malaysia Sdn Bhd · MY · Manufacturingransomscarlettgroup reclama a fittleworth.com · GB · Retail & E-Commerceransombarracuda reclama a FINSA · ES · Financial Servicesransomnetrunner reclama a F***** G****** C********** C*** · USransomendzone reclama a Momentum Telecom · Technologyransomendzone reclama a Absolute Bail Bonds · US · Financial Servicesransomeverest reclama a Grundbaulabor Trier GmbH · DE · Manufacturingransomnetrunner reclama a I****** A***** · KWransominterlock reclama a K&A Industries · USransomeverest reclama a Final Notice Before Publication · Otherransompanzer reclama a RE/MAX Germany · DE · Professional Servicesransomcurious worm reclama a i*t*r***t.com · Technologyransomcurious worm reclama a t**a.comransomplay reclama a Frey Properties of Highland LLC · US · Retail & E-Commerce
← Todos los CVEs
CVE Watch5 nov 2026

CVE-2025-52053

TOTOLINK X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_417D74 function via the file_name

CVSS

9.8

Crítico

EPSS

4.6%

p92

KEV

—

Exploit Today

28

0-100

Publicado: 15 sept 2025 · Última mod.: 5 nov 2026 · CWE-77

EPSS · 30d
4.4%EPSS · 30 días4.6%
2026-10-172026-11-13
Descripción técnica

TOTOLINK X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_417D74 function via the file_name parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request.

Referencias oficiales
CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1261677.2 ALT
74.9%
——22A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.2, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated remote attacker with domain admin or admin privileges to delete users of other tenant domains on a paired FortiAuthenticator, execute arbitrary code as root or arbitrary CLI commands, and read or write arbitrary files as root via crafted HTTP requests to the administrative interface.1dCVE-2026-960537.8 ALT
54.7%
——16Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.4dCVE-2026-839535.5 MED
58.1%
——17Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an authorized attacker to disclose information locally.4dCVE-2026-1233878.0 ALT
57.4%
——17Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an authorized attacker to elevate privileges over a network.4dCVE-2026-1216628.6 ALT
45.2%
——14Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.5dCVE-2026-1199898.2 ALT
48.9%
——15Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an authorized attacker to execute code over a network.5d