CVE-2026-9458

A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setWanCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument enabled leads to os command injection. The attack may be performed from remote. The exploit is publicly available and might be used.

• CWE-77
• CWE-78

• https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_346/README.md
• https://vuldb.com/submit/813457
• https://vuldb.com/vuln/365439
• https://vuldb.com/vuln/365439/cti
• https://www.totolink.net/

Published

May 25, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-94574A local cross-user code execution vulnerability exists in GN…7.8
• CVE-2026-94575A logic vulnerability in Brocade Fabric OS versions before 1…5.7
• CVE-2026-94576An authentication logic and privilege escalation vulnerabili…8
• CVE-2026-94577A privilege escalation vulnerability exists in the internal …7.8
• CVE-2026-94578Brocade Fabric OS versions before 10.0.1 contain an authoriz…8.8
• CVE-2026-94579An OS command injection vulnerability exists in the PAM (Plu…8
• CVE-2026-94580An arbitrary file and directory deletion vulnerability exist…4.5
• CVE-2026-94581An OS command injection vulnerability exists in the REST API…6.8
• CVE-2026-94582A memory buffer overflow vulnerability exists in the interna…7.8
• CVE-2026-94583A race condition vulnerability exists in the request process…2.6
• CVE-2026-94584A race condition and thread-safety vulnerability exists in t…2.6
• CVE-2026-94585An authentication bypass vulnerability exists in the web man…8.8