CVE-2025-70327

TOTOLINK X5000R v9.1.0cu_2415_B20250515 contains an argument injection vulnerability in the setDiagnosisCfg handler of the /usr/sbin/lighttpd executable. The ip parameter is retrieved via websGetVar and passed to a ping command through CsteSystem without validating if the input starts with a hyphen (-). This allows remote authenticated attackers to inject arbitrary command-line options into the ping utility, potentially leading to a Denial of Service (DoS) by causing excessive resource consumption or prolonged execution.

• CWE-88
• CWE-400

• https://github.com/neighborhood-H/0-DAY/blob/main/Toto-link/X5000R/SetDiagnosisCfg/report.mdExploit, Third Party Advisory
• https://www.notion.so/TOTOLINK-X5000R-SetDiagnosisCfg-2d170566ca7f8098a0bcee9f2a15d40d?source=copy_linkExploit, Third Party Advisory

Published

Feb 23, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-70309A stack overflow in the pcmreframe_flush_packet function of …5.5
• CVE-2025-7031Missing Authentication for Critical Function vulnerability i…5.3
• CVE-2025-70310A heap overflow in the vorbis_to_intern() function of GPAC v…5.5
• CVE-2025-70311JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inj…6.5
• CVE-2025-70314webfsd 1.21 is vulnerable to a Buffer Overflow via a crafted…9.8
• CVE-2025-7032A memory abuse issue exists in the Rockwell Automation Arena…7.8
• CVE-2025-70328TOTOLINK X6000R v9.4.0cu.1498_B20250826 contains an OS comma…8.8
• CVE-2025-70329TOTOLink X5000R v9.1.0cu_2415_B20250515 contains an OS comma…8
• CVE-2025-7033A memory abuse issue exists in the Rockwell Automation Arena…7.8
• CVE-2025-70330Easy Grade Pro 4.1.0.2 contains a file parsing logic flaw in…3.3
• CVE-2025-70336A Stored cross-site scripting (XSS) vulnerability in 'Create…4.8
• CVE-2025-70341Insecure permissions in App-Auto-Patch v3.4.2 create a race …7.8