CVE-2025-13184

9.8 criticalEPSS 20%

Critical (9.8) in totolink x5000r firmware. EPSS 20% chance of exploitation in the next 30 days.

Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank password on factory/reset X5000R V9.1.0u.6369_B20230113 (arbitrary command execution). Earlier versions that share the same implementation, may also be affected.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 20% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2025-12-10
Modified: 2026-09-25
Record from: the NVD, synced 2026-10-19

Affected

totolink:x5000r_firmware

References

https://hackingbydoing.wixsite.com/hackingbydoing/post/totolink-x5000r-ax1800-router-authentication-bypass
https://www.kb.cert.org/vuls/id/821724

Check your stack JSON