CVE-2026-0641

creationtimestamp| type| source ---|---|--- 2026-01-06 19:32:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115849820059269521 2026-01-06 20:13:33+00:00| seen| Telegram/IDZM-U-kLaMeLOHSZRXTD9u0IyoQQmgHJLI16VuZIVt-ROU 2026-01-06 21:27:15+00:00| seen|...

CVE-2026-0641 TOTOLINK WA300 cstecgi.cgi sub_401510 command injection

A security vulnerability has been detected in TOTOLINK WA300 5.2cu.7112B20190227. This vulnerability affects the function sub401510 of the file cstecgi.cgi. The manipulation of the argument UPLOADFILENAME leads to command injection. The attack may be initiated remotely. The exploit has been...