CVE-2026-82597 in NR1800X

Prediction

by VulDB Data Team • 08/30/2026

A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681_B20230703. This affects the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ussd leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-397092
• CPE: ready
• CWE: CWE-77 (confirmed)
• Exploit: Download
• CVSS: 7.4 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-82597
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-82597
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-82597/