CVE-2026-5692

Medium CVSS: 6.9

A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function setGameSpeedCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument enable results in os command injection. The attack may be performed from remote. The exploit has been made public and could be used.

Vendor

Product

CWE

CWE-77

Yayın Tarihi

2026-04-07 00:16:20

Güncelleme

2026-04-07 00:16:20

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-77 MEDIUM 2026

Referanslar

https://github.com/Litengzheng/vuldb_new/blob/main/A7100RU/vul_190/README.md https://vuldb.com/submit/792963 https://vuldb.com/vuln/355519 https://vuldb.com/vuln/355519/cti https://www.totolink.net/