CVE•Published 2025-09-25•Modified 2026-10-11•1 article on news•6 live references•NVD data
CVE-2025-11005Totolink · X6000r_firmware
Vulnerability data via NVD (ingested)
CVSS v3.1
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS percentile
70
Exploit Prediction Scoring System · top 30% of all CVEs
Weaknesses (CWE)
Description
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458_B20250708.
Timeline
Published 2025-09-25
Modified 2026-10-11
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
Shodan · vuln tag0 hosts
vuln:CVE-2025-11005Hosts Shodan has explicitly fingerprinted as vulnerable.
Shodan · OS
os:"X6000r Firmware"Hosts Shodan identified as running X6000r Firmware.
More intel sources (5)
Shodan report
vuln:CVE-2025-11005Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2025-11005Censys host search filtered to this CVE id.
grep.app
CVE-2025-11005Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2025-11005GitHub code search for direct mentions.
Google dork
"CVE-2025-11005" exploit -site:nvd.nist.govWrite-ups and news, NVD excluded.
Known PoCs on GitHub (6)
CVE-2025-110056 repos
yks0000/starred-repo-tocGo
Generates Markdown table for all Starred Repositories by a GitHub user.
svg153/awesome-starsJavaScript
ma3u/MinimumViableHealthDataspacev2TypeScript
The demo models a concrete EHDS secondary-use scenario: a clinical research organisation wants to run a drug-repurposing study using synthetic patient data held by a hospital, wit…
neighborhood-H/1-DAY_ConfirmationPython
DaniloSilvaDeOliveira/SCAikidoShell
Open-source SCA tool for CI/CD pipelines that detects vulnerabilities in your dependencies using Aikido Intel.
herberttn/promissingunknown
A curated list of my GitHub stars by stargazed