CVE-2026-8137: Totolink x5000r

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A vulnerability has been found in Totolink X5000R 9.1.0u.6369_B20230113. This vulnerability affects the function sub_458E40 of the file /boafrm/formDdns. The manipulation of the argument submit-url leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Affected products

• Totolink x5000r: version 9.1.0u.6369_B20230113 only

Published 2026-05-08. Last modified 2026-06-17.