CVE-2026-40627 – CyberSecurityBoard

Critical CVEs

CVE-2026-40627 — Critical vulnerability brief

An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can…

critical Critical CVE CVE-2026-40627

October 20, 2026