CVE-2026-1723Disclosure

LOWCVSS 9.2 · CRITICAL

Exploit discussion active in current signal (3 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1498_B20250826.

Back to dashboard

1.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Threat summary

Public PoC is present in monitored signal
3 mentions across 1 observed day

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 3 signals
Disclosure: 3 classified signals
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Full discourse3 posts

Vulmon Vulnerability Feed@VulmonFeeds251d
Disclosure
CVE-2026-1723 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1723
Post summary
A new OS Command Injection vulnerability (CVE-2026-1723) affecting TOTOLINK X6000R is disclosed with technical details, but no PoC, exploit, patch, or active exploitation evidence is included.
0000051
4.0K followersView on X
CVE@CVEnew251d
Disclosure
CVE-2026-1723 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affec… https://www.cve.org/CVERecord?id=CVE-2026-1723
Post summary
The text announces CVE‑2026‑1723, describing an OS command injection flaw in the TOTOLINK X6000R, with no mention of PoC, exploit code, active attacks, patches, or debunking.
00000198
56.5K followersView on X
0day Signal@0dayPublishing251d
Disclosure
🚨 CVE-2026-1723: TOTOLINK X6000R Unauthenticated C... Unauthenticated OS command injection in TOTOLINK X6000R routers creates a perfect storm for remote attackers - trivial t... https://zerodaysignal.com/vulnerability/CVE-2026-1723 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The post announces a new unauthenticated OS command injection vulnerability (CVE-2026-1723) in TOTOLINK X6000R routers, providing a link for further details.
0000060
132 followersView on X

Explore more

Back to dashboard