CVE-2026-6116: Totolink A7100RU CGI cstecgi.cgi setDiagnosisCfg os command injection
A vulnerability has been found in Totolink A7100RU 7.4cu.2313b20191024. This vulnerability affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument ip leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6116?
CVE-2026-6116 is classified as a high severity vulnerability due to its potential for remote code execution through OS command injection.
How do I fix CVE-2026-6116?
To fix CVE-2026-6116, update the Totolink A7100RU firmware to the latest version available from the manufacturer.
What are the risks associated with CVE-2026-6116?
The risks associated with CVE-2026-6116 include unauthorized remote access to the device and the potential compromise of the entire network.
Which devices are affected by CVE-2026-6116?
CVE-2026-6116 affects the Totolink A7100RU router running version 7.4cu.2313_b20191024.
What does CVE-2026-6116 exploit in Totolink A7100RU?
CVE-2026-6116 exploits a vulnerability in the CGI handler function setDiagnosisCfg, allowing for OS command injection.