VULNERABILITY INTELLIGENCE
CVE-2026-7242
CVSS score9.8 CRITICAL
EPSS probability2.45%
CISA KEVNot currently listed
Published2026-04-28
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setOpenVpnClientCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument enabled can lead to os command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Weakness classification
- cna@vuldb.com: CWE-77