CVE-2026-1547

creationtimestamp| type| source ---|---|--- 2026-01-28 23:44:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdjhd6p76s2n 2026-09-02 11:00:28+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2e6bd6ef-5e63-496a-a133-1e1b18ec205f 2026-09-03...

CVE-2026-1547

A vulnerability was detected in Totolink A7000R 4.1cu.4154. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument pluginname results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be us...