Vulnerabilities CVE-2026-7154

CVE-2026-7154

Critical

Open

TLP:CLEAR

AI Analysis

No AI analysis yet.

Description

A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setAdvancedInfoShow of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument tty_server can lead to os command injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.

Details

CVSS Score: 9.8
EPSS Score ⓘ: 1.79%

76.2th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Confidence: 90%
Published: Apr 27, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.