CVE-2026-37152

TOTOLINK X5000R V9.1.0cu.2415_B20250515 was discovered to contain a hardcoded password for root access.

• Published Sep 15, 2026
• CVSS 9.8 critical
• 0.5% chance of exploitation in the next 30 days (EPSS)

CVE-2026-37152 at the National Vulnerability Database