CVE-2026-6132: Totolink A7100RU CGI cstecgi.cgi setLedCfg os command injection
A vulnerability was determined in Totolink A7100RU 7.4cu.2313b20191024. Affected by this issue is the function setLedCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument enable causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6132?
CVE-2026-6132 is classified as a high-severity vulnerability due to the potential for OS command injection.
How do I fix CVE-2026-6132?
To mitigate the impact of CVE-2026-6132, update your Totolink A7100RU router firmware to the latest version provided by the vendor.
What components are affected by CVE-2026-6132?
CVE-2026-6132 impacts the CGI Handler component, specifically the setLedCfg function in the /cgi-bin/cstecgi.cgi file.
What actions can attackers perform with CVE-2026-6132?
Attackers can exploit CVE-2026-6132 to execute arbitrary operating system commands on the affected router.
Is my Totolink A7100RU secure from CVE-2026-6132?
If your Totolink A7100RU is running version 7.4cu.2313_b20191024 or earlier, it is vulnerable to CVE-2026-6132 and should be updated immediately.