CVE-2026-5853: Totolink A7100RU CGI cstecgi.cgi setIpv6LanCfg os command injection
A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313b20191024. Affected by this vulnerability is the function setIpv6LanCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument addrPrefixLen leads to os command injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5853?
CVE-2026-5853 is classified as a high severity vulnerability due to the potential for remote code execution through os command injection.
How does CVE-2026-5853 affect the Totolink A7100RU?
CVE-2026-5853 impacts the setIpv6LanCfg function of the cstecgi.cgi component, allowing unauthorized command execution.
How can I fix CVE-2026-5853?
To mitigate CVE-2026-5853, update your Totolink A7100RU device to the latest firmware version provided by the manufacturer.
What systems are vulnerable to CVE-2026-5853?
CVE-2026-5853 specifically affects Totolink A7100RU routers running version 7.4cu.2313_b20191024.
Is CVE-2026-5853 being actively exploited?
There are reports suggesting that CVE-2026-5853 could be exploited in the wild, making it critical to address immediately.