CVE-2026-7204

High CVSS: 8.9

A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setPptpServerCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument enable causes os command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Vendor

Product

CWE

CWE-77

Yayın Tarihi

2026-04-28 01:16:01

Güncelleme

2026-04-28 01:16:01

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-77 HIGH 2026

Referanslar

https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_323/README.md https://vuldb.com/submit/801530 https://vuldb.com/vuln/359804 https://vuldb.com/vuln/359804/cti https://www.totolink.net/