EUVD-2026-21748

A vulnerability was found in Totolink A7100RU 7.4cu.2313b20191024. Affected by this vulnerability is the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument command results in os command injection. The attack may be launched...

CVE-2026-6140 Totolink A7100RU CGI cstecgi.cgi UploadFirmwareFile os command injection

A vulnerability was found in Totolink A7100RU 7.4cu.2313b20191024. This impacts the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument FileName results in os command injection. The attack may be initiated remotely...

CVE-2026-6140

Affected product: Totolink A7100RU (CGI Handler, /cgi-bin/cstecgi.cgi). Vulnerability: In UploadFirmwareFile, manipulating the FileName argument enables os command injection. Impact: Remote attacker could exploit; exploit public. CVSS metrics in initial and connected docs indicate CRITICAL severi...

CVE-2026-6138 Totolink A7100RU CGI cstecgi.cgi setAccessDeviceCfg os command injection

A flaw has been found in Totolink A7100RU 7.4cu.2313b20191024. The impacted element is the function setAccessDeviceCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument mac causes os command injection. The attack can be initiated remotely. The exploi...

CVE-2026-6138

The CVE concerns Totolink A7100RU (firmware 7.4cu.2313_b20191024) where the CGI Handler’s function setAccessDeviceCfg in /cgi-bin/cstecgi.cgi accepts a manipulated mac argument to trigger OS command injection. This allows a remote attacker to exploit the vulnerability over the network (no authent...

TOTOLINK A7100RU operating system command injection vulnerability (CNVD-2026-32912)

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setPptpServerCfg function in the cstecgi.cgi file, which fails to properly handle the enable...

TOTOLINK A7100RU operating system command injection vulnerability (CNVD-2026-32911)

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setVpnAccountCfg function in the /cgi-bin/cstecgi.cgi file, which fails to...

TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32925)

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setTtyServiceCfg function in the /cgi-bin/cstecgi.cgi file, which fails to...

TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32917)

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setAdvancedInfoShow function in the /cgi-bin/cstecgi.cgi file, which fails to...

TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32920)

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setLedCfg function in the /cgi-bin/cstecgi.cgi file, which fails to properly...

TOTOLINK A7100RU 操作系统命令注入漏洞

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK Corporation in China. The Totolink A7100RU 7.4cu.2313b20191024 version contains a vulnerability related to operating system command injection. This vulnerability arises from improper handling of the parameter “FileName” in the functio...

TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32926)

TOTOLINK A7100RU is a wireless router produced by China Jiying Electronics Corporation. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setRadvdCfg function in the /cgi-bin/cstecgi.cgi file, which fails to properly handle t...

TOTOLINK A7100RU operating system command injection vulnerability (CNVD-2026-32922)

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setDiagnosisCfg function in the /cgi-bin/cstecgi.cgi file, which fails to proper...

CVE-2026-6154: Improper Neutralization of Special Elements used in an OS Command

A security flaw has been discovered in Totolink A7100RU 7.4cu.2313b20191024. The affected element is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument wizard results in os command injection. The attack may be initiat...

TOTOLINK A7000R 安全漏洞

TOTOLINK A7000R is a wireless router product that is mainly used to provide network connectivity and Wi-Fi access. TOTOLINK A7000R suffers from a stack buffer overflow vulnerability. The vulnerability stems from the setWiFiEasyGuestCfg function in the /cgi-bin/cstecgi.cgi file failing to properly...

The vulnerability of the setVpnPassCfg() function in the cstecgi.cgi script of the TOTOLINK A7100RU router’s software allows a hacker to execute arbitrary commands.

The vulnerability of the setVpnPassCfg function in the cstecgi.cgi script of the TOTOLINK A7100RU router’s software is related to the failure to eliminate special elements during the processing of the pptpPassThru parameter. Exploiting this vulnerability allows a remote attacker to execute...

TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32918)

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setTelnetCfg function in the cstecgi.cgi file, which fails to properly validate the...

TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32924)

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setNetworkCfg function in the cstecgi.cgi file, which fails to properly validate the proto...

TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32915)

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setPortalConfWeChat function in the cstecgi.cgi file, which fails to properly handle the...

CVE-2026-6132 Totolink A7100RU CGI cstecgi.cgi setLedCfg os command injection

A vulnerability was determined in Totolink A7100RU 7.4cu.2313b20191024. Affected by this issue is the function setLedCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument enable causes os command injection. Remote exploitation of the attack is...