CVE-2026-9454

A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setOpenVpnCertGenerationCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Executing a manipulation of the argument servername can lead to os command injection. The attack may be launched remotely. The exploit has been published and may be used.

• CWE-77
• CWE-78

• https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_341/README.md
• https://vuldb.com/submit/813447
• https://vuldb.com/vuln/365435
• https://vuldb.com/vuln/365435/cti
• https://www.totolink.net/

Published

May 25, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-9453A vulnerability was detected in FoundDream miniclawd up to 2…7.3
• CVE-2026-94532lamp-cloud through 5.10.0 contains an authorization bypass v…6.5
• CVE-2026-94533lamp-cloud through 5.10.0 contains an authorization bypass v…6.5
• CVE-2026-94534lamp-cloud through 5.10.0 fails to validate user identity in…7.1
• CVE-2026-94535lamp-cloud through 5.10.0 contains an authorization bypass v…7.1
• CVE-2026-94536lamp-cloud through 5.10.0 fails to validate the employeeId p…4.3
• CVE-2026-94540DesktopSMS 1.11.0 by MrPear contains an unauthorized access …7.7
• CVE-2026-9455A vulnerability has been found in Totolink A8000RU 7.1cu.643…9.8
• CVE-2026-9456A vulnerability was found in Totolink A8000RU 7.1cu.643_b202…9.8
• CVE-2026-9457A vulnerability was determined in Totolink A8000RU 7.1cu.643…9.8
• CVE-2026-94570SGLang contains a DoS vulnerability caused by missing input …5.9
• CVE-2026-94571In OpenStack Octavia before 18.0.1, the Amphora provider dri…9.4