Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:a7100ru_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA7100Ru Firmware (1170cf6d-3c7f-5068-b5ca-499fc2ce920c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-6195 vulnerable 2026-06-08 08:07:04.538766 Totolink A7100RU CGI cstecgi.cgi setPasswordCfg os command injection
CRITICAL (9.8)
A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument admpass leads to os command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-04-13T17:30:13.953Z
Updated: 2026-04-13T18:00:15.007Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6156 vulnerable 2026-06-08 08:07:04.503686 Totolink A7100RU CGI cstecgi.cgi setIpQosRules os command injection
CRITICAL (9.8)
A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument Comment leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Published: 2026-04-13T03:30:21.041Z
Updated: 2026-04-13T19:14:15.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6155 vulnerable 2026-06-08 08:07:04.503332 Totolink A7100RU CGI cstecgi.cgi setWanCfg os command injection
CRITICAL (9.8)
A weakness has been identified in Totolink A7100RU 7.4cu.2313. The impacted element is the function setWanCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument pppoeServiceName can lead to os command injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-04-13T03:15:24.203Z
Updated: 2026-04-14T16:29:54.527Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6154 vulnerable 2026-06-08 08:07:04.502920 Totolink A7100RU CGI cstecgi.cgi setWizardCfg os command injection
CRITICAL (9.8)
A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument wizard results in os command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-04-13T03:00:15.385Z
Updated: 2026-04-13T15:03:26.716Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6140 vulnerable 2026-06-08 08:07:04.490167 Totolink A7100RU CGI cstecgi.cgi UploadFirmwareFile os command injection
CRITICAL (9.8)
A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument FileName results in os command injection. The attack may be initiated remotely. The exploit has been made public and could be used.
Published: 2026-04-13T00:30:13.660Z
Updated: 2026-04-13T15:19:43.693Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6139 vulnerable 2026-06-08 08:07:04.489891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6138 vulnerable 2026-06-08 08:07:04.489618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6132 vulnerable 2026-06-08 08:07:04.487275 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6131 vulnerable 2026-06-08 08:07:04.486864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6116 vulnerable 2026-06-08 08:07:04.471639 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6115 vulnerable 2026-06-08 08:07:04.471371 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6114 vulnerable 2026-06-08 08:07:04.470993 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6113 vulnerable 2026-06-08 08:07:04.470705 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6112 vulnerable 2026-06-08 08:07:04.470276 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6029 vulnerable 2026-06-08 08:07:04.398662 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6028 vulnerable 2026-06-08 08:07:04.398385 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6027 vulnerable 2026-06-08 08:07:04.398087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6026 vulnerable 2026-06-08 08:07:04.397790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6025 vulnerable 2026-06-08 08:07:04.397368 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5997 vulnerable 2026-06-08 08:07:04.349955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5996 vulnerable 2026-06-08 08:07:04.349586 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5995 vulnerable 2026-06-08 08:07:04.349220 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5994 vulnerable 2026-06-08 08:07:04.348843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5993 vulnerable 2026-06-08 08:07:04.348461 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5978 vulnerable 2026-06-08 08:07:04.328070 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5977 vulnerable 2026-06-08 08:07:04.327797 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5976 vulnerable 2026-06-08 08:07:04.327528 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5975 vulnerable 2026-06-08 08:07:04.327245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5854 vulnerable 2026-06-08 08:07:04.169171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5853 vulnerable 2026-06-08 08:07:04.168802 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5852 vulnerable 2026-06-08 08:07:04.168443 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5851 vulnerable 2026-06-08 08:07:04.168039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5850 vulnerable 2026-06-08 08:07:04.167743 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5692 vulnerable 2026-06-08 08:07:03.985512 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5691 vulnerable 2026-06-08 08:07:03.985128 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5690 vulnerable 2026-06-08 08:07:03.984860 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5689 vulnerable 2026-06-08 08:07:03.984466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5688 vulnerable 2026-06-08 08:07:03.984063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5678 vulnerable 2026-06-08 08:07:03.974789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5677 vulnerable 2026-06-08 08:07:03.974425 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.