VULNERABILITY INTELLIGENCE
CVE-2026-9534
CVSS score6.3 MEDIUM
EPSS probability10.38%
CISA KEVNot currently listed
Published2026-05-26
Last modified2026-07-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Description
A flaw has been found in Totolink CA750-PoE 6.2c.510. This affects the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Executing a manipulation of the argument PIN can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Weakness classification
- cna@vuldb.com: CWE-77