CVE-2026-37152

CVSS 9.8 (critical) · published 2026-09-15

TOTOLINK X5000R V9.1.0cu.2415_B20250515 was discovered to contain a hardcoded password for root access.

Weakness: CWE-798

Source: NVD CVE-2026-37152

References

• https://github.com/AndreaLandriscina/Hardcoded-Password-Totolink-X5000R
• https://github.com/AndreaLandriscina/Hardcoded-Password-Totolink-X5000R/tree/main
• https://github.com/AndreaLandriscina/Hardcoded-Password-Totolink-X5000R

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.