CVE-2025-9577

A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credentials. Attacking locally is a requirement. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been released to the public and may be exploited.

• CWE-1392

• https://github.com/XXRicardo/iot-cve/blob/main/TOLOLINK/X2000R-Gh-V2.0.0.mdExploit, Third Party Advisory
• https://github.com/XXRicardo/iot-cve/blob/main/TOLOLINK/X2000R-Gh-V2.0.0.md#steps-to-reproduceExploit, Third Party Advisory
• https://vuldb.com/?ctiid.321691Permissions Required, VDB Entry
• https://vuldb.com/?id.321691Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.636069Third Party Advisory, VDB Entry
• https://www.totolink.net/Product
• https://github.com/XXRicardo/iot-cve/blob/main/TOLOLINK/X2000R-Gh-V2.0.0.mdExploit, Third Party Advisory
• https://github.com/XXRicardo/iot-cve/blob/main/TOLOLINK/X2000R-Gh-V2.0.0.md#steps-to-reproduceExploit, Third Party Advisory

Published

Aug 28, 2025

Last Modified

Jul 25, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-9571A remote code execution (RCE) vulnerability exists in Google…8.7
• CVE-2025-9572n authorization flaw in Foreman's GraphQL API allows low-pri…6.5
• CVE-2025-9573The ns_backup extension through 13.0.2 for TYPO3 allows comm…8.6
• CVE-2025-9574Missing Authentication for Critical Function vulnerability i…10
• CVE-2025-9575A vulnerability was determined in Linksys RE6250, RE6300, RE…8.8
• CVE-2025-9576A vulnerability was identified in seeedstudio ReSpeaker Link…7
• CVE-2025-9578Local privilege escalation due to insecure folder permission…7.8
• CVE-2025-9579A weakness has been identified in LB-LINK BL-X26 1.2.8. The …8.8
• CVE-2025-9580A security vulnerability has been detected in LB-LINK BL-X26…8.8
• CVE-2025-9581A vulnerability was detected in Comfast CF-N1 2.6.0. This im…9.8
• CVE-2025-9582A flaw has been found in Comfast CF-N1 2.6.0. Affected is th…9.8
• CVE-2025-9583A vulnerability has been found in Comfast CF-N1 2.6.0. Affec…8.8