CVE-2025-52089: Totolink n300rb Firmware

High severity, CVSS 8.8. EPSS: 7.9% chance of exploitation in the next 30 days.

A hidden remote support feature protected by a static secret in TOTOLINK N300RB firmware version 8.54 allows an authenticated attacker to execute arbitrary OS commands with root privileges.

Affected products

• Totolink n300rb Firmware: version 8.54 only

Published 2025-07-11. Last modified 2026-06-17.