TOTOLINK X5000R v9.1.0cu.2350_B20230313 was discovered to contain a command injection via the disconnectVPN function.
- https://github.com/cainiao159357/x5000r_poc/blob/main/README.md
No PoCs found on GitHub currently.