CVE-2026-5691: Totolink A7100RU cstecgi.cgi setFirewallType os command injection
A vulnerability has been found in Totolink A7100RU 7.4cu.2313b20191024. This affects the function setFirewallType of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument firewallType leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5691?
The severity of CVE-2026-5691 is medium with a score of 6.9.
What type of vulnerability is CVE-2026-5691?
CVE-2026-5691 is an OS Command Injection vulnerability found in the Totolink A7100RU.
How can I exploit CVE-2026-5691?
CVE-2026-5691 can be exploited remotely by manipulating the firewallType argument in the setFirewallType function.
How do I fix CVE-2026-5691?
To fix CVE-2026-5691, update the firmware of Totolink A7100RU to the latest version that addresses this vulnerability.
What software is affected by CVE-2026-5691?
CVE-2026-5691 affects the Totolink A7100RU router with firmware version 7.4cu.2313_b20191024.