CVE-2026-9475

creationtimestamp| type| source ---|---|--- 2026-06-22 04:31:34+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou2j2f34m2y...

CVE-2026-9475 Totolink A8000RU Web Management cstecgi.cgi setIpQosRules os command injection

A vulnerability was determined in Totolink A8000RU 7.1cu.643b20200521. This affects the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. This manipulation of the argument Comment causes os command injection. Remote exploitation of the attack is...