# Totolink X5000r Firmware


- [CVE-2025-70327](https://insights.sbomify.com/CVE-2025-70327/): Command injection in n/a (critical 9.8)
- [CVE-2025-13184](https://insights.sbomify.com/CVE-2025-13184/): Auth bypass in X5000R's (AX1800 router) (critical 9.8)
- [CVE-2024-42737](https://insights.sbomify.com/CVE-2024-42737/): Command injection in n/a (critical 9.8)
- [CVE-2024-42745](https://insights.sbomify.com/CVE-2024-42745/): Command injection in n/a (critical 9.8)
- [CVE-2024-42748](https://insights.sbomify.com/CVE-2024-42748/): Command injection in n/a (critical 9.8)
- [CVE-2024-32353](https://insights.sbomify.com/CVE-2024-32353/): Command injection in n/a (critical 9.8)
- [CVE-2024-28639](https://insights.sbomify.com/CVE-2024-28639/): Memory corruption in n/a (critical 9.8)
- [CVE-2023-39617](https://insights.sbomify.com/CVE-2023-39617/): Command injection in n/a (critical 9.8)
- [CVE-2023-39618](https://insights.sbomify.com/CVE-2023-39618/): Command injection in n/a (critical 9.8)
- [CVE-2023-31569](https://insights.sbomify.com/CVE-2023-31569/): Command injection in n/a (critical 9.8)
- [CVE-2023-33486](https://insights.sbomify.com/CVE-2023-33486/): Command injection in n/a (critical 9.8)
- [CVE-2023-33487](https://insights.sbomify.com/CVE-2023-33487/): Command injection in n/a (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/totolink/x5000r-firmware/