CVE-2026-4497
- EPSS 1.91%
- Veröffentlicht 20.03.2026 19:16:20
- Zuletzt bearbeitet 23.03.2026 14:32:02
A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227. Affected by this issue is the function recvUpgradeNewFw of the file /cgi-bin/cstecgi.cgi. This manipulation causes os command injection. Remote exploitation of the attack is possi...
CVE-2026-2167
- EPSS 0.69%
- Veröffentlicht 08.02.2026 17:15:58
- Zuletzt bearbeitet 11.02.2026 18:43:19
A vulnerability was detected in Totolink WA300 5.2cu.7112_B20190227. The impacted element is the function setAPNetwork of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Ipaddr results in os command injection. The attack may be perfor...
CVE-2026-0641
- EPSS 2.68%
- Veröffentlicht 06.01.2026 19:16:07
- Zuletzt bearbeitet 22.01.2026 17:32:10
A security vulnerability has been detected in TOTOLINK WA300 5.2cu.7112_B20190227. This vulnerability affects the function sub_401510 of the file cstecgi.cgi. The manipulation of the argument UPLOAD_FILENAME leads to command injection. The attack may...