Critical severity9.8NVD Advisory· Published Oct 1, 2025· Updated Jun 17, 2026

CVE-2025-61044

Description

TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the agentName parameter in the setEasyMeshAgentCfg function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Totolink/X18llm-fuzzy2 versions
V9.1.0cu.2053_B20230309+ 1 more
- (no CPE)range: V9.1.0cu.2053_B20230309
- (no CPE)
Totolink/X18 Firmware
cpe:2.3:o:totolink:x18_firmware:9.1.0cu.2053_b20230309:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/ilovekeer/IOT/blob/main/TOTOLINK/X18/setEasyMeshAgentCfg/2.mdnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000