CVE-2026-7203

High CVSS: 8.9

A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument enable results in os command injection. The attack can be launched remotely. The exploit has been made public and could be used.

Vendor

Product

CWE

CWE-77

Yayın Tarihi

2026-04-28 01:16:01

Güncelleme

2026-04-28 01:16:01

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-77 HIGH 2026

Referanslar

https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_322/README.md https://vuldb.com/submit/801528 https://vuldb.com/vuln/359803 https://vuldb.com/vuln/359803/cti https://www.totolink.net/