CVE-2026-9543

CVE-2026-9543 - Totolink N300RH is affected through the Web Management Interface file /cgi-bin/cstecgi.cgi, function setPasswordCfg. Manipulating the argument admpass enables an OS command injection, allowing remote execution. Public exploit details exist, with HIGH impact on confidentiality, int...

CVE-2026-9543 Totolink N300RH Web Management cstecgi.cgi setPasswordCfg os command injection

A vulnerability has been found in Totolink N300RH 6.1c.1353B20190305. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument admpass leads to os command injection. The attack can be executed remotely. T...