VULNERABILITY INTELLIGENCE

CVE-2026-1723

EPSS probability1.00%
CISA KEVNot currently listed
Published2026-01-30
Last modified2026-06-17

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1498_B20250826.

Weakness classification

  • psirt@paloaltonetworks.com: CWE-78

Primary references