← Database

CVE-2026-9435

CRITICAL CVSS: 9.8 Published: 2026-05-25 Modified: 2026-07-23

Description

A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setQosCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument enable results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Affected Platforms

Unknown

Weakness Type

CWE-77, CWE-78

References