Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.9
CVE-2026-6155: Totolink A7100RU: Remote Attack Possible via WAN Configuration
CVE-2026-6155 · published 6 months ago
Summary
A security flaw in the Totolink A7100RU's Web interface allows an attacker to execute unauthorized commands on the router. This could happen if a malicious person finds out the router's WAN configuration. To stay safe, update your router to the latest version.
Original advisory text
A weakness has been identified in Totolink A7100RU 7.4cu.2313. The impacted element is the function setWanCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation...
A weakness has been identified in Totolink A7100RU 7.4cu.2313. The impacted element is the function setWanCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument pppoeServiceName can lead to os command injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-77Command Injection
CWE-78OS Command Injection
Timeline
Published13 Apr 2026
Updated30 Oct 2026
First seen13 Apr 2026
Sources
CVE-2026-6155 · NVD
Track software like this
Free during beta