CVE-2026-7037

creationtimestamp| type| source ---|---|--- 2026-04-26 12:32:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkfks7jwo22n 2026-04-27 00:00:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkgrazvwvd2j 2026-04-27 00:00:40+00:00| seen|...

CVE-2026-7037 Totolink A8000RU CGI cstecgi.cgi setVpnPassCfg os command injection

A security flaw has been discovered in Totolink A8000RU 7.1cu.643b20200521. This issue affects the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument pptpPassThru results in os command injection. The attack can be executed...