Skip to content
Threat Feed

Tag

CVE-2026-9475

1 brief RSS
critical threat

Totolink A8000RU Command Injection Vulnerability (CVE-2026-9475)

Totolink A8000RU version 7.1cu.643_b20200521 is vulnerable to remote OS command injection via manipulation of the Comment argument in the setIpQosRules function, allowing unauthenticated attackers to execute arbitrary commands on the device.

A8000RU 7.1cu.643_b20200521 command injection router vulnerability CVE-2026-9475
2r 1t 1c