CVE-2026-15204

mediumCVSS 5.3covered by 1 sourcefirst seen 2026-07-09

A vulnerability was detected in TOTOLINK X5000R 9.1.0cu.2415_B20250515/9.1.0cu.2350_B20230313. Affected by this vulnerability is the function exportOvpn of the file /web/cgi-bin/cstecgi.cgi of the component OpenVPN Export. The manipulation results in path traversal. The attack may be launched remotely.

⚡ Watch CVE-2026-15204

Get an email if CVE-2026-15204 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.49% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 39% of all EPSS-scored CVEs.

Advisory coverage (1)

mediumCVE-2026-15204: A vulnerability was detected in TOTOLINK X5000R 9.1.0cu.2415_B20250515/9.1.0cu.2350_B20230313.…nvd · 2026-07-09

External references

NVD record for CVE-2026-15204

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-15204 status](https://www.csirts.com/badge/CVE-2026-15204)](https://www.csirts.com/cve/CVE-2026-15204)