CVE-2026-7155: Totolink A8000RU CGI cstecgi.cgi setLoginPasswordCfg os command injection
A security vulnerability has been detected in Totolink A8000RU 7.1cu.643b20200521. This impacts the function setLoginPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument admpass leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7155?
CVE-2026-7155 is classified as a high-severity vulnerability due to the potential for remote command injection.
How do I fix CVE-2026-7155?
To fix CVE-2026-7155, update Totolink A8000RU to the latest firmware version that addresses this vulnerability.
What impact does CVE-2026-7155 have on Totolink A8000RU?
CVE-2026-7155 allows attackers to execute arbitrary OS commands on the device, leading to potential system compromise.
Is CVE-2026-7155 exploited in the wild?
As of the latest information, there have been reports of active exploitation targeting CVE-2026-7155.
What components are affected by CVE-2026-7155?
CVE-2026-7155 affects the CGI Handler component specifically within the setLoginPasswordCfg function of the cstecgi.cgi file.