Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2797▼ 203 respecto a la semana anterior
Críticas / altas1352▲ 28 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)255▼ 266 respecto a la semana anterior
13 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (5.3) | 2.8% | — | Totolink A6000r Firmware | 4/4/2025 | 17/6/2026 | A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000. Affected by this vulnerability is the function apcli_cancel_wps of the file /usr/lib/lua/luci/controller/mtkwifi.lua. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been… | |
| Analizada | Media (6.3) | 0.69% | — | Totolink A6000r Firmware | 10/1/2025 | 17/6/2026 | TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function. | |
| Analizada | Media (6.3) | 0.69% | — | Totolink A6000r Firmware | 10/1/2025 | 17/6/2026 | TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the action_passwd function. | |
| Analizada | Media (5.1) | 0.76% | — | Totolink A6000r Firmware | 10/1/2025 | 17/6/2026 | TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the action_reboot function. | |
| Analizada | Alta (8) | 1.2% | — | Totolink A6000r Firmware | 10/1/2025 | 17/6/2026 | TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enable_wsh function. | |
| Modificada | Crítica (9.8) | 5.5% | — | Totolink A6000r Firmware | 23/7/2024 | 17/6/2026 | TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the cmd parameter in the webcmd function. | |
| Analizada | Alta (8.8) | 2.2% | — | Totolink A6000r Firmware | 22/7/2024 | 17/6/2026 | TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the get_apcli_conn_info function. | |
| Analizada | Crítica (9.8) | 2.4% | — | Totolink A6000r Firmware | 22/7/2024 | 17/6/2026 | TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function. | |
| Analizada | Alta (8) | 2.3% | — | Totolink A6000r Firmware | 22/7/2024 | 17/6/2026 | TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function. | |
| Analizada | Crítica (9.8) | 2.5% | — | Totolink A6000r Firmware | 22/7/2024 | 17/6/2026 | TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function. | |
| Analizada | Media (6.8) | 2.1% | — | Totolink A6000r Firmware | 22/7/2024 | 17/6/2026 | TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps function. | |
| Analizada | Media (6.8) | 2.1% | — | Totolink A6000r Firmware | 22/7/2024 | 17/6/2026 | TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function. | |
| Modificada | Alta (8.8) | 1.5% | — | Totolink A6000r Firmware | 20/6/2024 | 9/7/2026 | A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vif_enable function. |