CVE-2026-6116: OS Command Injection in Totolink A7100RU
A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument ip leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
AI Analysis
Technical Summary
The Totolink A7100RU router firmware 7.4cu.2313_b20191024 contains an OS command injection vulnerability (CVE-2026-6116) in the CGI Handler component. The vulnerability arises from improper sanitization of the 'ip' parameter in the setDiagnosisCfg function of /cgi-bin/cstecgi.cgi, enabling remote attackers to inject and execute arbitrary operating system commands. The vulnerability requires no privileges or user interaction and can be exploited over the network. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. Although public exploit information is available, no official patch or mitigation has been published by Totolink as of the data provided.
Potential Impact
Successful exploitation allows remote attackers to execute arbitrary OS commands on the affected Totolink A7100RU device, potentially leading to full system compromise, unauthorized access, and disruption of device functionality. The vulnerability affects confidentiality, integrity, and availability of the device. Given the critical CVSS score of 9.3 and remote, unauthenticated exploitability, the impact is severe for affected devices.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling remote access to the affected CGI interface or isolate the device from untrusted networks to reduce exposure. Monitor vendor channels for updates and apply any official patches promptly once available.
CVE-2026-6116: OS Command Injection in Totolink A7100RU
Description
A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument ip leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
CVSS v4.0
Score 9.3critical
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Totolink A7100RU router firmware 7.4cu.2313_b20191024 contains an OS command injection vulnerability (CVE-2026-6116) in the CGI Handler component. The vulnerability arises from improper sanitization of the 'ip' parameter in the setDiagnosisCfg function of /cgi-bin/cstecgi.cgi, enabling remote attackers to inject and execute arbitrary operating system commands. The vulnerability requires no privileges or user interaction and can be exploited over the network. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. Although public exploit information is available, no official patch or mitigation has been published by Totolink as of the data provided.
Potential Impact
Successful exploitation allows remote attackers to execute arbitrary OS commands on the affected Totolink A7100RU device, potentially leading to full system compromise, unauthorized access, and disruption of device functionality. The vulnerability affects confidentiality, integrity, and availability of the device. Given the critical CVSS score of 9.3 and remote, unauthenticated exploitability, the impact is severe for affected devices.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling remote access to the affected CGI interface or isolate the device from untrusted networks to reduce exposure. Monitor vendor channels for updates and apply any official patches promptly once available.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-04-11T08:18:14.840Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69db273e82d89c981fe5dd7b
Added to database: 4/12/2026, 5:01:50 AM
Last enriched: 4/19/2026, 6:32:37 AM
Last updated: 5/27/2026, 9:53:48 AM
Views: 155
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.