CVE-2026-1547 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was detected in Totolink A7000R 4.1cu.4154. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of th…
Medium CVSS: 5.3

CVE-2026-1547

A vulnerability was detected in Totolink A7000R 4.1cu.4154. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument plugin_name results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
Vendor
Totolink
Product
A7000r Firmware
CWE
CWE-74
Yayın Tarihi
2026-01-28 22:15:55
Güncelleme
2026-02-09 16:56:16
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 A7000r Firmware MEDIUM Totolink 2026

Referanslar

https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/01_RCE_setUnloadUserData_RCE.md https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/01_RCE_setUnloadUserData_RCE.md#poc https://vuldb.com/?ctiid.343231 https://vuldb.com/?id.343231 https://vuldb.com/?submit.739713 https://www.totolink.net/ https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/01_RCE_setUnloadUserData_RCE.md https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/01_RCE_setUnloadUserData_RCE.md#poc