CVE-2026-91853: TOTOLINK X5000R Export Ovpn cstecgi.cgi exportOvpn os command injection

Published Sep 15, 2026

Updated

A vulnerability has been found in TOTOLINK X5000R 9.1.0cu.2089B20211224. The impacted element is the function exportOvpn of the file /cgi-bin/cstecgi.cgi?action=exportOvpn&type=user of the component Export Ovpn Handler. The manipulation of the argument filetype leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

TOTOLINK X5000R=9.1.0cu.2089_B20211224

Event History

Sep 15, 2026

CVE Published

via MITRE·04:15 PM

Data Sourced

via MITRE·04:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attack is remote and requires low privileges. No user interaction is required.

Which systems are known to be affected?

The provided information identifies TOTOLINK X5000R firmware version 9.1.0cu.2089_B20211224. The affected endpoint is /cgi-bin/cstecgi.cgi?action=exportOvpn&type=user, specifically the exportOvpn function's filetype argument.

Is public exploit information available?

Yes. The exploit has been publicly disclosed and may be used.