CVE-2026-1623

creationtimestamp| type| source ---|---|--- 2026-01-30 00:10:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlz7w23xl2c 2026-07-30 06:00:49+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6f76092d-75fa-45b5-b393-24b4f407f9aa...

CVE-2026-1623

Totolink A7000R 4.1cu.4154 contains a command-injection vulnerability in the setUpgradeFW function of /cgi-bin/cstecgi.cgi, triggered by manipulating the FileName argument. The issue is exploitable remotely, with public PoC/exploit availability noted in several sources. CVSS-derived metrics indic...

CVE-2026-1623

A weakness has been identified in Totolink A7000R 4.1cu.4154. Impacted is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument FileName causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and...