Threats tagged 'ghsa-q3rx-v5xr-49vf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.3	CVE-2026-7538Totolink A8000RU · Command Injection Critical9.32026-05-01GCVE DatabaseCVE-2026-7538 A critical OS command injection vulnerability exists in the CGI Handler component of Totolink A8000RU firmware version 7.1cu.643_b20200521. The flaw is triggered by manipulating the 'proto' argument in the /cgi-bin/cstecgi.cgi endpoint. This vulnerability can be exploited remotely without authentication. Public exploit code is available, increasing the risk of exploitation. Report on CVE-2026-7538 Vulnerability CWE-77 #ghsa-q3rx-v5xr-49vf	GCVE Database	2026-05-01

Page 1 of 1