{"schema_version":1,"title":"TOTOLINK X5000R firmware vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 3 vulnerabilities in TOTOLINK X5000R firmware: 0 in the last 7 days and 0 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2025-67445, was published on 24 February 2026.","url":"https://junglewise.ai/threats/technologies/x5000r-firmware","json_url":"https://junglewise.ai/threats/technologies/x5000r-firmware.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/x5000r-firmware","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":1,"all_time":3,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":3},"latest":[{"cve":"CVE-2025-67445","cvss":7.5,"epss":0.0035,"slug":"cve-2025-67445-totolink-x5000r-denial-of-service-in-cstecgi-cgi","title":"TOTOLINK X5000R denial of service in cstecgi.cgi","severity":"high","exploited":false,"published_at":"2026-02-24T15:21:36.707+00:00","url":"https://junglewise.ai/threats/cve-2025-67445-totolink-x5000r-denial-of-service-in-cstecgi-cgi"},{"cve":"CVE-2025-14586","cvss":6.3,"epss":0.0276,"slug":"cve-2025-14586-a-vulnerability-was-determined-in-totolink-x5000r-9-1-0cu-2089","title":"A vulnerability was determined in TOTOLINK X5000R 9.1.0cu.2089_B20211224. Affected by this issue is the function…","severity":"medium","exploited":false,"published_at":"2025-12-13T16:16:51.713+00:00","url":"https://junglewise.ai/threats/cve-2025-14586-a-vulnerability-was-determined-in-totolink-x5000r-9-1-0cu-2089"},{"cve":"CVE-2025-13184","cvss":9.8,"epss":0.1128,"slug":"cve-2025-13184-unauthenticated-telnet-enablement-via-cstecgi-cgi-auth-bypass","title":"Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank…","severity":"critical","exploited":false,"published_at":"2025-12-10T13:16:02.97+00:00","url":"https://junglewise.ai/threats/cve-2025-13184-unauthenticated-telnet-enablement-via-cstecgi-cgi-auth-bypass"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"TOTOLINK X2000r","slug":"x2000r","vulnerabilities":31,"url":"https://junglewise.ai/threats/technologies/x2000r"},{"name":"TOTOLINK A3300R","slug":"a3300r","vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/a3300r"},{"name":"TOTOLINK A3300r Firmware","slug":"a3300r-firmware","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/a3300r-firmware"},{"name":"TOTOLINK A8000RU","slug":"a8000ru","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/a8000ru"},{"name":"TOTOLINK A950RG","slug":"a950rg","vulnerabilities":14,"url":"https://junglewise.ai/threats/technologies/a950rg"},{"name":"TOTOLINK A3002MU","slug":"a3002mu","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/a3002mu"},{"name":"TOTOLINK CA300-PoE","slug":"ca300-poe","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/ca300-poe"},{"name":"TOTOLINK CA750-PoE","slug":"ca750-poe","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/ca750-poe"},{"name":"TOTOLINK A7100RU","slug":"a7100ru","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/a7100ru"},{"name":"TOTOLINK NR1800X","slug":"nr1800x","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/nr1800x"},{"name":"TOTOLINK X5000R","slug":"x5000r","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/x5000r"},{"name":"TOTOLINK A720R","slug":"a720r","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/a720r"}],"technology":{"hub":true,"name":"TOTOLINK X5000R firmware","slug":"x5000r-firmware","vendor":{"hub":true,"name":"TOTOLINK","slug":"totolink","url":"https://junglewise.ai/threats/vendors/totolink"},"aliases":[],"category":"firmware","homepage":"https://www.totolink.net/home/menu/detail/menu_list/20/id/218.html","repo_url":"https://www.totolink.net/home/menu/detail/menu_list/products/id/218.html","description":"Firmware for the TOTOLINK X5000R AX1800 Wireless Dual Band Gigabit Router.","url":"https://junglewise.ai/threats/technologies/x5000r-firmware"},"most_severe":[{"cve":"CVE-2025-13184","cvss":9.8,"epss":0.1128,"slug":"cve-2025-13184-unauthenticated-telnet-enablement-via-cstecgi-cgi-auth-bypass","title":"Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank…","severity":"critical","exploited":false,"published_at":"2025-12-10T13:16:02.97+00:00","url":"https://junglewise.ai/threats/cve-2025-13184-unauthenticated-telnet-enablement-via-cstecgi-cgi-auth-bypass"},{"cve":"CVE-2025-67445","cvss":7.5,"epss":0.0035,"slug":"cve-2025-67445-totolink-x5000r-denial-of-service-in-cstecgi-cgi","title":"TOTOLINK X5000R denial of service in cstecgi.cgi","severity":"high","exploited":false,"published_at":"2026-02-24T15:21:36.707+00:00","url":"https://junglewise.ai/threats/cve-2025-67445-totolink-x5000r-denial-of-service-in-cstecgi-cgi"},{"cve":"CVE-2025-14586","cvss":6.3,"epss":0.0276,"slug":"cve-2025-14586-a-vulnerability-was-determined-in-totolink-x5000r-9-1-0cu-2089","title":"A vulnerability was determined in TOTOLINK X5000R 9.1.0cu.2089_B20211224. Affected by this issue is the function…","severity":"medium","exploited":false,"published_at":"2025-12-13T16:16:51.713+00:00","url":"https://junglewise.ai/threats/cve-2025-14586-a-vulnerability-was-determined-in-totolink-x5000r-9-1-0cu-2089"}],"generated_at":"2026-11-12T03:07:00.164048+00:00"}