CVE-2025-65606

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

January 6, 2026

Last Seen

January 7, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

TOTOLINK EX200 Vulnerability Allows Root Access via Telnet46.7

A critical security vulnerability, CVE-2025-65606, has been identified in the TOTOLINK EX200 wireless range extender, enabling remote authenticated attackers to gain full system control. The flaw, stemming from improper error handling in the firmware-upload mechanism, was disclosed by CERT/CC on Jan...

Totolink Range Extender Vulnerability Enables Device Takeover36.9

A vulnerability in the Totolink range extender allows unauthorized device takeover due to an error in the firmware-upload handler. This flaw leads to the activation of an unauthenticated root-level Telnet service, which can be exploited by attackers. Users are advised to restrict administrative acce...