CVE-2026-9511

A vulnerability was identified in Totolink CA750-PoE 6.2c.510. This affects the function setWebWlanIdx of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Such manipulation of the argument webWlanIdx leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

• CWE-77
• CWE-78

• https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_49/49.md
• https://vuldb.com/submit/813922
• https://vuldb.com/vuln/365511
• https://vuldb.com/vuln/365511/cti
• https://www.totolink.net/
• https://vuldb.com/submit/813922

Published

May 25, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-95104Stack-based buffer overflow vulnerability exists in BUFFALO …7.5
• CVE-2026-95105Reliance on Obfuscation or Encryption of Security-Relevant I…8.2
• CVE-2026-95106Gitea accepted pushed Git trees containing two entries with …9.1
• CVE-2026-95107A ThreadX module chooses `object_size` when it calls `txm_mo…7
• CVE-2026-95108One logical thread of a user-mode ThreadX module costs the M…6.8
• CVE-2026-95109The Cortex-A7 MMU Modules port validates a caller-supplied b…8.5
• CVE-2026-95111A memory-protected ThreadX module's queue request reaches th…4.8
• CVE-2026-95112When processing issue and comment bodies, Gitea scanned the …6.5
• CVE-2026-95114libwebsockets contains an out-of-bounds read vulnerability i…7.5
• CVE-2026-95115Buffer Overflow vulnerability in libwebsockets main 106d542c…7.5
• CVE-2026-95116An issue in libming through 0.4.8 allows a remote attacker t…7.5
• CVE-2026-95117Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647…3.7