CVE-2026-1623

creationtimestamp| type| source ---|---|--- 2026-01-30 00:10:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlz7w23xl2c...

CVE-2026-1623

A weakness has been identified in Totolink A7000R 4.1cu.4154. Impacted is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument FileName causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and...

CVE-2026-1623

Totolink A7000R 4.1cu.4154 is affected by a command-injection in the file /cgi-bin/cstecgi.cgi, via manipulating the FileName argument in the setUpgradeFW function. The vulnerability is exploitable remotely; public exploit/poc material exists and exploit maturity is labeled as PROOF-OF-CONCEPT. I...