CyberSecBulletin

Toto Link vulnerabilities

We track 1 vulnerability in Toto Link products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 10, 2025.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Toto Link vulnerabilities

  • 9.8 Critical severity

    X5000R's (AX1800 router): Incorrect Authorization

    CVE-2025-13184Toto LinkEPSS 20.8%

    Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank password on factory/reset X5000R V9.1.0u.6369_B20230113 (arbitrary command execution). Earlier versions that share the same implementation, may a