EIP-2026-101507

This advisory details backdoor credentials (root/12345 and onlime_r/12345) in four TOTOLINK router models, allowing unauthorized telnet access with root privileges. The vulnerability stems from hardcoded credentials in /etc/passwd_orig or /etc/passwd.org, copied to /var/passwd during boot.