EUVD-2026-4962

A weakness has been identified in Totolink A7000R 4.1cu.4154. Impacted is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument FileName causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and...

TOTOLINK A3600R 操作系统命令注入漏洞

The TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's TOTOLINK. An operating system command injection vulnerability exists in the TOTOLINK A3600R version V4.1.2cu.5182B20201102, which stems from a command injection issue with the username parameter in the /cstecgi.cgi location...