CVE-2026-6154: Totolink A7100RU CGI cstecgi.cgi setWizardCfg os command injection
A security flaw has been discovered in Totolink A7100RU 7.4cu.2313b20191024. The affected element is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument wizard results in os command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6154?
CVE-2026-6154 is classified as a critical severity vulnerability due to its potential for remote command execution.
How do I fix CVE-2026-6154?
To fix CVE-2026-6154, update your Totolink A7100RU device to the latest firmware version released after 7.4cu.2313_b20191024.
What type of vulnerability is CVE-2026-6154?
CVE-2026-6154 is an OS command injection vulnerability affecting the CGI handler of the Totolink A7100RU router.
Which software versions are affected by CVE-2026-6154?
CVE-2026-6154 affects the Totolink A7100RU with firmware version 7.4cu.2313_b20191024.
Who is impacted by CVE-2026-6154?
Users of the Totolink A7100RU router running the specified firmware version are at risk due to CVE-2026-6154.