PT-2026-30701 · Totolink · A7100Ru

Ltzhuster2 · Published 2026-04-06 · Updated 2026-04-06 · CVE-2026-5677

NVD

CVSS v2.0

7.5

High

AV:N/AC:L/Au:N/C:P/I:P/A:P

A security flaw has been discovered in Totolink A7100RU 7.4cu.2313 b20191024. Impacted is the function CsteSystem of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument resetFlags results in os command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.

Exploit

Fix

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

CVE-2026-5677

Affected Products

A7100Ru

References · 6

• 🔥 https://github.com/Litengzheng/vuldb_new/blob/main/A7100RU/vul_184/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5677 · Security Note
• https://vuldb.com/vuln/355504 · Note
• https://vuldb.com/submit/792606 · Note
• https://vuldb.com/vuln/355504/cti · Note
• https://totolink.net · Note