CVE-2026-9436

A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setL2tpServerCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Executing a manipulation of the argument enable can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used.

• CWE-77
• CWE-78

• https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_357/README.md
• https://vuldb.com/submit/813461
• https://vuldb.com/submit/813909
• https://vuldb.com/vuln/365417
• https://vuldb.com/vuln/365417/cti
• https://www.totolink.net/

Published

May 25, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-9434A security vulnerability has been detected in Totolink A8000…9.8
• CVE-2026-94346PowerProtect Data Domain Virtual Edition, Feature Release ve…7.2
• CVE-2026-94347PowerProtect Data Domain Virtual Edition, Feature Release ve…7.2
• CVE-2026-94348Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, con…6.1
• CVE-2026-94349Dell OpenManage Enterprise, versions prior to 4.8.0, contain…8
• CVE-2026-9435A vulnerability was detected in Totolink A8000RU 7.1cu.643_b…9.8
• CVE-2026-94360The Paymentfor Gateway for WooCommerce WordPress plugin befo…5.3
• CVE-2026-94361The Payable Payment Gateway for WooCommerce WordPress plugin…5.3
• CVE-2026-94367OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376…7.2
• CVE-2026-94368A flaw was found in the signature verification logic of noob…7.1
• CVE-2026-9437A vulnerability has been found in DTStack Taier 1.4.0. This …6.3
• CVE-2026-94370A defect in the Qt for MCUs core string handling causes heap…6.5