CVE-2026-9433: Totolink A8000RU Web Management cstecgi.cgi setMacFilterRules os command injection
A weakness has been identified in Totolink A8000RU 7.1cu.643b20200521. This issue affects the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. This manipulation of the argument enable causes os command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Totolink A8000RUto a version that resolves this vulnerability.Fixed in 7.1cu.643_b20200521 - Compensating control
Because the weakness is in the Web Management Interface (/cgi-bin/cstecgi.cgi setMacFilterRules) and can be initiated remotely, restrict access to the device’s Web Management Interface to trusted IPs only (e.g., via firewall/ACL) and block it from untrusted networks.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9433?
CVE-2026-9433 is rated as critical with a CVSS score of 9.8.
What causes the vulnerability in CVE-2026-9433?
CVE-2026-9433 is caused by an OS command injection flaw in the setMacFilterRules function of the Totolink A8000RU Web Management interface.
How do I fix CVE-2026-9433?
To mitigate CVE-2026-9433, it is recommended to update the firmware of the Totolink A8000RU to the latest version provided by the manufacturer.
What are the potential impacts of CVE-2026-9433?
Exploitation of CVE-2026-9433 can lead to unauthorized command execution on the affected device.
Who is affected by CVE-2026-9433?
CVE-2026-9433 affects users of the Totolink A8000RU router running version 7.1cu.643_b20200521.