CVE-2026-5689 in A7100RU

Riassunto

di MITRE • 07/04/2026

A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setNtpCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument tz results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsabile: VulDB
• Divulgazione: 07/04/2026
• Moderazione: accettato
• Voce: VDB-355516
• CPE: pronto
• CWE: CWE-78 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.3 (VulDB)
• EPSS: 0.01459
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-5689
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-5689
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-5689/