CVE-2025-70329

creationtimestamp| type| source ---|---|--- 2026-02-23 20:30:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkimsrfiy2s 2026-02-23 20:57:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfkk44jbgy2o 2026-02-24 22:00:15+00:00| seen|...

CVE-2025-70329

TOTOLink X5000R v9.1.0cu2415B20250515 contains an OS command injection vulnerability in the setIptvCfg handler of the /usr/sbin/lighttpd executable. The vlanVidLan1 and other vlanVidLanX parameters are retrieved via UciGetStr and passed to the CsteSystem function without adequate validation or...