Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
TOTOLink X5000R v9.1.0cu_2415_B20250515 contains an OS command injection vulnerability in the setIptvCfg handler of the /usr/sbin/lighttpd executable. The vlanVidLan1 (and other vlanVidLanX) parameters are retrieved via Uci_Get_Str and passed to the CsteSystem function without adequate validation or filtering. This allows an authenticated attacker to execute arbitrary shell commands with root privileges by injecting shell metacharacters into the affected parameters.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-02-23 | 2 | Disclosure2 |
| 2026-02-24 | 1 | Disclosure1 |
| 2026-02-27 | 1 | Disclosure1 |
| 2026-02-28 | 1 | Disclosure1 |
CVE-2025-70329 OS Command Injection in TOTOLink X5000R Router Firmware with Root Privileges https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-70329
Post summary
The post announces a new OS command injection vulnerability (CVE-2025-70329) affecting TOTOLink X5000R routers, enabling root-level command execution.
🟠 CVE-2025-70329 - High TOTOLink X5000R v9.1.0cu_2415_B20250515 contains an OS command injection vulnerability in the setIptvCfg handler of the /usr/sbin/lighttpd executable. The vlanVidLan1 (and other vlanVidLanX) ... https://www.thehackerwire.com/vulnerability/CVE-2025-70329/ https://t.co/SynF6FxpGH
Post summary
The post discloses an OS command injection vulnerability in TOTOLink X5000R firmware, detailing the affected handler and component, but does not mention PoC, exploit, or patch.
CVE-2025-70329 (CVSS:8.0, HIGH) is Analyzed. TOTOLink X5000R v9.1.0cu_2415_B20250515 contains an OS command injection vulnerability in the setIptvCfg handler of the ..https://nvd.nist.gov/vuln/detail/CVE-2025-70329 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces the existence of CVE-2025-70329, highlighting its CVSS score, severity, and technical specifics, but does not provide a PoC, exploit, or patch.
CVE-2025-70329 (CVSS:8.0, HIGH) is Analyzed. TOTOLink X5000R v9.1.0cu_2415_B20250515 contains an OS command injection vulnerability in the setIptvCfg handler of the ..https://nvd.nist.gov/vuln/detail/CVE-2025-70329 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
CVE-2025-70329 is a high‑severity OS command injection flaw in the TOTOLink X5000R, as described in the NVD entry.
CVE-2025-70329 TOTOLink X5000R v9.1.0cu_2415_B20250515 contains an OS command injection vulnerability in the setIptvCfg handler of the /usr/sbin/lighttpd executable. The vlanVidLan1… https://www.cve.org/CVERecord?id=CVE-2025-70329
Post summary
The text announces an OS command injection vulnerability in TOTOLink X5000R firmware, detailing the affected handler and executable.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | totolink | x5000r | - | - | - |
| OS | totolink | x5000r_firmware | 9.1.0cu.2415_b20250515 | - | - |