Qihoo 360 vulnerabilities
We track 4 vulnerabilities in Qihoo 360 products across 7 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.
Latest Qihoo 360 vulnerabilities
- 10.0 Critical severity
Whole Home Router M5: Use of Hard-coded Password
A vulnerability was identified in Qihoo 360 Whole Home Router M5 4.0.17.1566. This issue affects the function Home of the file /etc/init.d/mpt of the component Boot Script. The manipulation leads to hard-coded credentials. Remote exploitation of the attack is
- 7.3 High severity
D603-2: Improper Neutralization of Special Elements used in a Command
A vulnerability was determined in Qihoo 360 D603-2, D600-2 and D606-6 up to 6.3.2. This vulnerability affects the function on_push_message of the file /fs2/bin/iscm of the component Timezone Push Handler. Executing a manipulation of the argument tz can lead to
- 10.0 Critical severity
D603-2: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in Qihoo 360 D603-2, D600-2, D606-6 and D706 up to 6.4.9. This affects the function testspeed_command of the file /fs2/bin/iscm. Performing a manipulation of the argument host results in os command injection. The attack may be initiat
- 10.0 Critical severity
D621-2: Insufficient Verification of Data Authenticity
A vulnerability has been found in Qihoo 360 D621-2, D603-2, D600-2, D619, D606-6 and D706 up to 6.4.9. Affected by this issue is the function verify_sign of the file fs2/bin/iscm of the component Firmware Signature Verification. Such manipulation of the argume