CVE-2026-5976: Totolink A7100RU CGI cstecgi.cgi setStorageCfg os command injection
A security flaw has been discovered in Totolink A7100RU 7.4cu.2313b20191024. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument sambaEnabled results in os command injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5976?
CVE-2026-5976 is classified as a critical vulnerability due to its potential to allow unauthorized command execution on affected systems.
How do I fix CVE-2026-5976?
To remediate CVE-2026-5976, users should upgrade the firmware of the Totolink A7100RU to the latest version that addresses this vulnerability.
What component is affected in CVE-2026-5976?
CVE-2026-5976 affects the CGI Handler component, specifically the setStorageCfg function within the cstecgi.cgi file.
What types of attacks can CVE-2026-5976 facilitate?
CVE-2026-5976 can facilitate command injection attacks, potentially leading to complete system compromise.
Which version of Totolink A7100RU is impacted by CVE-2026-5976?
CVE-2026-5976 specifically impacts the Totolink A7100RU version 7.4cu.2313_b20191024.