Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 04:35:12 +0000 CVE-2026-6113 — Totolink A7100RU CGI cstecgi.cgi setTtyServiceCfg os command injection https://vulnerability.circl.lu/vuln/cve-2026-6113 <p><strong>Affected:</strong> Totolink A7100RU</p> <p>A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this vulnerability is the function setTtyServiceCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument ttyEnable leads to os command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.</p> <p><strong>Affected:</strong> Totolink A7100RU</p> <p>A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this vulnerability is the function setTtyServiceCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument ttyEnable leads to os command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.</p> https://vulnerability.circl.lu/vuln/cve-2026-6113