Tag

Cve-2026-7242

1 brief RSS

Totolink A8000RU OS Command Injection Vulnerability

A remote OS command injection vulnerability exists in the setOpenVpnClientCfg function of the Totolink A8000RU router (version 7.1cu.643_b20200521) via manipulation of the 'enabled' argument in the /cgi-bin/cstecgi.cgi CGI handler.

A8000RU command-injection rce totolink cve-2026-7242

2r 1t 1c Apr 28, 2026