Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

12350 matches found

NVD
NVD•added 2026/04/27 4:16 p.m.•6 views

CVE-2026-7138

A vulnerability was detected in Totolink A8000RU 7.1cu.643b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument tz results in os command injection. The attack can be executed remotely. The explo...

10CVSS0.01766EPSS
SaveExploits0References5
NVD
NVD•added 2026/04/27 4:16 p.m.•10 views

CVE-2026-7137

A security vulnerability has been detected in Totolink A8000RU 7.1cu.643b20200521. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument sambaEnabled leads to os command injection. Remote exploitation of the attack ...

10CVSS0.01766EPSS
SaveExploits0References5
NVD
NVD•added 2026/04/27 4:16 p.m.•7 views

CVE-2026-7136

A weakness has been identified in Totolink A8000RU 7.1cu.643b20200521. Affected by this issue is the function setDmzCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument wanIdx can lead to os command injection. The attack may be launched...

10CVSS0.01766EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB•added 2026/04/27 4:15 p.m.•11 views

CVE-2026-7139

A flaw has been found in Totolink A8000RU 7.1cu.643b20200521. This issue affects the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument mode causes os command injection. The attack is possible to be carried out remotely. The...

10CVSS5.2AI score0.01766EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment•added 2026/04/27 4:15 p.m.•5 views

CVE-2026-7139 Totolink A8000RU CGI cstecgi.cgi setWiFiAclRules os command injection

A flaw has been found in Totolink A8000RU 7.1cu.643b20200521. This issue affects the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument mode causes os command injection. The attack is possible to be carried out remotely. The...

10CVSS8.1AI score0.01766EPSS
SaveExploits0References5
EUVD
EUVD•added 2026/04/27 4:15 p.m.•9 views

EUVD-2026-25878

A flaw has been found in Totolink A8000RU 7.1cu.643b20200521. This issue affects the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument mode causes os command injection. The attack is possible to be carried out remotely. The...

10CVSS5.2AI score0.01766EPSS
SaveExploits0References5
CVE
CVE•added 2026/04/27 4:15 p.m.•15 views

CVE-2026-7139

The CVE concerns Totolink A8000RU (firmware 7.1cu.643_b20200521). The flaw is in the CGI handler function setWiFiAclRules within /cgi-bin/cstecgi.cgi, where argument mode manipulation enables remote OS command injection. The exploit is published and can be used remotely without authentication; im...

10CVSS8.2AI score0.01766EPSS
SaveExploits0References5
Cvelist
Cvelist•added 2026/04/27 4:15 p.m.•48 views

CVE-2026-7139 Totolink A8000RU CGI cstecgi.cgi setWiFiAclRules os command injection

A flaw has been found in Totolink A8000RU 7.1cu.643b20200521. This issue affects the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument mode causes os command injection. The attack is possible to be carried out remotely. The...

10CVSS0.01766EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment•added 2026/04/27 4:0 p.m.•7 views

CVE-2026-7138 Totolink A8000RU CGI cstecgi.cgi setNtpCfg os command injection

A vulnerability was detected in Totolink A8000RU 7.1cu.643b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument tz results in os command injection. The attack can be executed remotely. The explo...

10CVSS8.3AI score0.01766EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB•added 2026/04/27 4:0 p.m.•6 views

CVE-2026-7138

A vulnerability was detected in Totolink A8000RU 7.1cu.643b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument tz results in os command injection. The attack can be executed remotely. The explo...

10CVSS5.2AI score0.01766EPSS
SaveExploits0References5Affected Software1
CVE
CVE•added 2026/04/27 4:0 p.m.•26 views

CVE-2026-7138

Totolink A8000RU vulnerability CVE-2026-7138 affects the CGI Handler: file /cgi-bin/cstecgi.cgi, function setNtpCfg. Manipulating the tz argument leads to OS command injection with a remote attack path. Public exploit is indicated in the sources. No specific patch/version details or mitigations a...

10CVSS8.3AI score0.01766EPSS
SaveExploits0References5
Cvelist
Cvelist•added 2026/04/27 4:0 p.m.•44 views

CVE-2026-7138 Totolink A8000RU CGI cstecgi.cgi setNtpCfg os command injection

A vulnerability was detected in Totolink A8000RU 7.1cu.643b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument tz results in os command injection. The attack can be executed remotely. The explo...

10CVSS0.01766EPSS
SaveExploits0References5
EUVD
EUVD•added 2026/04/27 4:0 p.m.•8 views

EUVD-2026-25876

A vulnerability was detected in Totolink A8000RU 7.1cu.643b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument tz results in os command injection. The attack can be executed remotely. The explo...

10CVSS8.3AI score0.01766EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB•added 2026/04/27 3:45 p.m.•4 views

CVE-2026-7137

A security vulnerability has been detected in Totolink A8000RU 7.1cu.643b20200521. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument sambaEnabled leads to os command injection. Remote exploitation of the attack ...

10CVSS5.2AI score0.01766EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment•added 2026/04/27 3:45 p.m.•4 views

CVE-2026-7137 Totolink A8000RU CGI cstecgi.cgi setStorageCfg os command injection

A security vulnerability has been detected in Totolink A8000RU 7.1cu.643b20200521. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument sambaEnabled leads to os command injection. Remote exploitation of the attack ...

10CVSS8.2AI score0.01766EPSS
SaveExploits0References5
EUVD
EUVD•added 2026/04/27 3:45 p.m.•7 views

EUVD-2026-25875

A security vulnerability has been detected in Totolink A8000RU 7.1cu.643b20200521. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument sambaEnabled leads to os command injection. Remote exploitation of the attack ...

10CVSS8.2AI score0.01766EPSS
SaveExploits0References5
CVE
CVE•added 2026/04/27 3:45 p.m.•25 views

CVE-2026-7137

Totolink A8000RU 7.1cu.643_b20200521 is affected in CGI Handler (cgi-bin/cstecgi.cgi) via setStorageCfg. The vulnerability stems from manipulating the sambaEnabled argument, causing an OS command injection that enables remote exploitation. The exploit has been publicly disclosed, indicating pract...

10CVSS8.2AI score0.01766EPSS
SaveExploits0References5
Cvelist
Cvelist•added 2026/04/27 3:45 p.m.•39 views

CVE-2026-7137 Totolink A8000RU CGI cstecgi.cgi setStorageCfg os command injection

A security vulnerability has been detected in Totolink A8000RU 7.1cu.643b20200521. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument sambaEnabled leads to os command injection. Remote exploitation of the attack ...

10CVSS0.01766EPSS
SaveExploits0References5
EUVD
EUVD•added 2026/04/27 3:30 p.m.•8 views

EUVD-2026-25874

A weakness has been identified in Totolink A8000RU 7.1cu.643b20200521. Affected by this issue is the function setDmzCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument wanIdx can lead to os command injection. The attack may be launched...

10CVSS8.3AI score0.01766EPSS
SaveExploits0References5
Cvelist
Cvelist•added 2026/04/27 3:30 p.m.•42 views

CVE-2026-7136 Totolink A8000RU CGI cstecgi.cgi setDmzCfg os command injection

A weakness has been identified in Totolink A8000RU 7.1cu.643b20200521. Affected by this issue is the function setDmzCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument wanIdx can lead to os command injection. The attack may be launched...

10CVSS0.01766EPSS
SaveExploits0References5
Rows per page
Query Builder