Description
TOTOLink A3600R 存在命令注入漏洞，此漏洞是缺乏校验导致的。
TOTOLink A3600R 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://telecom.cnvd.org.cn/?hmsr=websiteindices.com&utm_source=websiteindices.com&utm_medium=referral&max=20&offset=1740
https://www.cnvd.org.cn/flaw/show/CNVD-2025-14785
https://cve.circl.lu/vuln/cnvd-2025-15261
https://avd.aliyun.com/product?prod=a3600r_firmware
https://github.com/zxsssd/TotoLink-
https://vuldb.com/vuln/353905
https://www.cve.org/CVERecord?id=CVE-2026-5020
https://radar.offseq.com/threat/cve-2026-5020-command-injection-in-totolink-a3600r-b468734a
https://www.cvedetails.com/cve/CVE-2026-5020/
https://dbugs.ptsecurity.com/vulnerability/PT-2026-28734
https://app.opencve.io/cve/CVE-2026-5020
https://www.nmmapper.com/nvd/cve/CVE-2026-5020/
https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2024-0624.html
https://security.bnu.edu.cn/ldgg/127768.html
https://www.fortinet.com/blog/threat-research/totolink-vulnerabilities-beastmode-mirai-campaign
https://www.instagram.com/p/DWdOsagj-YC/