VULNERABILITY INTELLIGENCE
CVE-2026-6132
CVSS score9.8 CRITICAL
EPSS probability2.17%
CISA KEVNot currently listed
Published2026-04-12
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
A vulnerability was determined in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setLedCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument enable causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Weakness classification
- cna@vuldb.com: CWE-77