CVE-2026-7242: Totolink A8000RU CGI cstecgi.cgi setOpenVpnClientCfg os command injection
A vulnerability was determined in Totolink A8000RU 7.1cu.643b20200521. Impacted is the function setOpenVpnClientCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument enabled can lead to os command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Totolink A8000RUto a version that resolves this vulnerability.Fixed in 7.1cu.643_b20200521 - Compensating control
Since the attack may be performed from remote against Totolink A8000RU CGI Handler /cgi-bin/cstecgi.cgi setOpenVpnClientCfg (os command injection), restrict remote access to the device’s CGI/admin interface (e.g., firewall/ACL/WAF) to trusted sources only.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7242?
CVE-2026-7242 has been classified as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2026-7242?
To mitigate the risk of CVE-2026-7242, users should update their Totolink A8000RU firmware to the latest version provided by the manufacturer.
What type of attack can exploit CVE-2026-7242?
CVE-2026-7242 can be exploited through OS command injection via the setOpenVpnClientCfg function in the CGI Handler.
What software is affected by CVE-2026-7242?
The vulnerability CVE-2026-7242 affects the Totolink A8000RU router running firmware version 7.1cu.643_b20200521.
Is CVE-2026-7242 being actively exploited in the wild?
At the time of assessment, there is no confirmed evidence of active exploitation of CVE-2026-7242.