CVE-2026-7202: Totolink A8000RU CGI cstecgi.cgi setWiFiWpsStart os command injection
A vulnerability has been found in Totolink A8000RU 7.1cu.643b20200521. This affects the function setWiFiWpsStart of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument wscDisabled leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7202?
CVE-2026-7202 is classified as a critical vulnerability due to its potential for remote command execution.
How do I fix CVE-2026-7202?
To fix CVE-2026-7202, update your Totolink A8000RU to the latest firmware version that addresses this vulnerability.
What type of vulnerability is CVE-2026-7202?
CVE-2026-7202 is an OS command injection vulnerability found in the CGI handler of the Totolink A8000RU.
Which component is affected by CVE-2026-7202?
The affected component in CVE-2026-7202 is the CGI Handler, specifically the setWiFiWpsStart function.
What should I do if I am using Totolink A8000RU version 7.1cu.643_b20200521?
If you are using Totolink A8000RU version 7.1cu.643_b20200521, it is crucial to apply the recommended security updates immediately to mitigate the risk.