TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32397)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the cstecgi.cgi file in the web management interface, where the setWiFiAdvancedCfg function fails to...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32386)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics Corporation. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the operation of the setAccessDeviceCfg function in the Web Management Interface component...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32388)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setIpQosRules function in the /cgi-bin/cstecgi.cgi file, which fails to properly validate the Comme...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32385)

TOTOLINK A8000RU is a wireless router produced by TOTOLINK, a company from China. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setParentalRules function in the Web management interface’s /cgi-bin/cstecgi.cgi file, which...

TOTOLINK CA750-PoE 操作系统命令注入漏洞

TOTOLINK CA750-PoE is a wireless network access device produced by TOTOLINK Corporation. Version 6.2c.510 of TOTOLINK CA750-PoE contains a vulnerability related to operating system command injection. This vulnerability arises from improper handling of theFileName parameter in the setUpgradeUboot...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32389)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setWanCfg function in the cstecgi.cgi file of the Web management interface component, which fails t...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32393)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from an issue with the UploadOpenVpnCert function in the cstecgi.cgi file used in the web management...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32398)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setMacFilterRules function in the Web management interface cstecgi.cgi, which fails to properly...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32396)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setWiFiWpsCfg function in the /cgi-bin/cstecgi.cgi file, which fails to properly validate the...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32391)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setOpenVpnCfg function in the cstecgi.cgi file, which fails to properly handle the enabled paramete...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32392)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the failure of the setOpenVpnCertGenerationCfg function in the Web management interface’s cstecgi.cgi...

CVE-2026-9531: Improper Neutralization of Special Elements used in an OS Command

A weakness has been identified in Totolink CA750-PoE 6.2c.510. Impacted is the function setUpgradeUboot of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. This manipulation of the argument FileName causes os command injection. The attack is possible to be carried out remotely. The...

CVE-2026-9533: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was detected in Totolink CA750-PoE 6.2c.510. The impacted element is the function recvUpgradeNewFw of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Performing a manipulation of the argument fwUrl/magicid results in os command injection. It is possible to initiate...

PT-2026-43188

A weakness has been identified in Totolink CA750-PoE 6.2c.510. Impacted is the function setUpgradeUboot of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. This manipulation of the argument FileName causes os command injection. The attack is possible to be carried out remotely. The...

TOTOLINK CA750-PoE 操作系统命令注入漏洞

TOTOLINK CA750-PoE is a wireless network access device produced by TOTOLINK Corporation. Version 6.2c.510 of TOTOLINK CA750-PoE contains a vulnerability related to operating system command injection. This vulnerability arises from the operation of the setUnloadUserData function in the...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32395)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics Corporation. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the operation of the setQosCfg function in the web-management-interfaces component’s...

CVE-2026-9512

A security flaw has been discovered in Totolink CA750-PoE 6.2c.510. This vulnerability affects the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Performing a manipulation of the argument admuser/admpass results in os command injection. The attack can b...

CVE-2026-9515

Totolink CA750-PoE (firmware 6.2c.510) is affected by an OS command injection in the Setting Handler’s /cgi-bin/cstecgi.cgi function setUnloadUserData when manipulating the plugin_version argument. The vulnerability enables remote exploitation with low privileges and could impact confidentiality,...

EUVD-2026-31771

A vulnerability was detected in Totolink CA750-PoE 6.2c.510. The affected element is the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation of the argument pluginversion results in os command injection. The attack may be launched remotel...

CVE-2026-9513

A weakness has been identified in Totolink CA750-PoE 6.2c.510. This issue affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Executing a manipulation of the argument hosttime can lead to os command injection. The attack can be launched remotely...