CVE-2026-91853

🗓️ 15 Sep 2026 16:15:08Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 29 Views🌐 WEB

OS command injection in TOTOLINK X5000R 9.1.0cu.2089 via filetype argument in exportOvpn handler.

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2026-91853 TOTOLINK X5000R Export Ovpn cstecgi.cgi exportOvpn os command injection	15 Sep 202616:15	–	cvelist
EUVD	EUVD-2026-78822	15 Sep 202616:15	–	euvd
NVD	CVE-2026-91853	15 Sep 202617:17	–	nvd
Positive Technologies	PT-2026-92118	15 Sep 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-91853: Improper Neutralization of Special Elements used in an OS Command	15 Sep 202600:00	–	rapid7
Vulnrichment	CVE-2026-91853 TOTOLINK X5000R Export Ovpn cstecgi.cgi exportOvpn os command injection	15 Sep 202616:15	–	vulnrichment

Vulners

Node

totolink x5000rMatch9.1.0cu.2089_b20211224

[
  {
    "vendor": "TOTOLINK",
    "product": "X5000R",
    "versions": [
      {
        "version": "9.1.0cu.2089_B20211224",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:o:totolink:x5000r_firmware:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "Export Ovpn Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/vuln/404082/cti
totolink	www.totolink.net/
github	www.github.com/awigwu76/TOTOLINK_X5000R/blob/main/2.md
vuldb	www.vuldb.com/submit/933810
vuldb	www.vuldb.com/vuln/404082
vuldb	www.vuldb.com/cve/CVE-2026-91853

Parameter	Position	Path	Description	CWE
type	query param	/cgi-bin/cstecgi.cgi?action=exportOvpn&type=user	OS command injection via manipulated type parameter in the Export Ovpn Handler endpoint.	CWE-77, CWE-78

16 Sep 2026 17:53Current

6.9Medium risk

Vulners AI Score6.9

CVSS 45.3

CVSS 26.5

CVSS 3.17.4

CVSS 37.4

EPSS0.01817

SSVC