CVE-2026-1547

creationtimestamp| type| source ---|---|--- 2026-01-28 23:44:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdjhd6p76s2n...

CVE-2026-1547

A vulnerability was detected in Totolink A7000R 4.1cu.4154. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument pluginname results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be us...