OS command injection

Everything SecOps Signal has reported about OS command injection: 2 stories, newest first. Part of our Vulnerabilities coverage.

TOTOLINK X2000R Firmware CVE-2026-10135: Authenticated Command Injection Enables Remote Code Execution

A critical vulnerability in specific TOTOLINK X2000R firmware allows authenticated attackers to execute arbitrary code via crafted HTTP requests.

Oct 21, 2026

An authenticated administrator can trigger arbitrary OS commands on client devices through a vulnerability in the Security Toolbox module.

Oct 21, 2026