CVE-2026-9511: Totolink CA750-PoE Setting cstecgi.cgi setWebWlanIdx os command injection
A vulnerability was identified in Totolink CA750-PoE 6.2c.510. This affects the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Such manipulation of the argument webWlanIdx leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable remote/web management access to the device. If disabling entirely is not possible, restrict the web interface so that cstecgi.cgi (Setting Handler) is only accessible from trusted LAN addresses and not from the WAN.
Totolink CA750-PoE web management (cstecgi.cgi Setting Handler) remote_management/web_interface_access = disabled or restricted to LAN only - Compensating control
Block or restrict access to the device management ports and the /cgi-bin/cstecgi.cgi path at network perimeter devices (firewall/ACL/WAF). Deny access from untrusted networks and allow only specific trusted IPs or management VLANs.
- Operational
Isolate any internet-facing or suspected-compromised devices until mitigations are applied. Monitor device logs for signs of exploitation, change administrative credentials if compromise is suspected, and apply vendor-provided firmware updates/patches as soon as they become available.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9511?
CVE-2026-9511 has a medium severity rating of 6.3.
How do I fix CVE-2026-9511?
To mitigate CVE-2026-9511, upgrade the Totolink CA750-PoE firmware to the latest version available.
What is the impact of CVE-2026-9511?
CVE-2026-9511 allows for OS command injection through the webWlanIdx argument in the setWebWlanIdx function, enabling remote attacks.
Is remote exploitation possible with CVE-2026-9511?
Yes, CVE-2026-9511 can be exploited remotely due to the nature of the OS command injection vulnerability.
Which component is affected by CVE-2026-9511?
CVE-2026-9511 impacts the Setting Handler component of the Totolink CA750-PoE device.