← Database

CVE-2026-6114

CRITICAL CVSS: 9.8 Published: 2026-04-12 Modified: 2026-06-17

Description

A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setNetworkCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument proto results in os command injection. The attack may be initiated remotely. The exploit is now public and may be used.

Affected Platforms

Unknown

Weakness Type

CWE-77, CWE-78

References