CVE-2026-9513

A weakness has been identified in Totolink CA750-PoE 6.2c.510. This issue affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Executing a manipulation of the argument host_time can lead to os command injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.

• CWE-77
• CWE-78

• https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_51/51.md
• https://vuldb.com/submit/813924
• https://vuldb.com/vuln/365513
• https://vuldb.com/vuln/365513/cti
• https://www.totolink.net/

Published

May 25, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-9506This vulnerability exists in Bagisto due to improper validat…8.7
• CVE-2026-9507A session fixation vulnerability has been identified in osTi…5.1
• CVE-2026-9508Incorrect permission settings on a critical resource in Supr…10
• CVE-2026-9509An unhandled exception in Suprema BioStar 2 (Server), versio…8.7
• CVE-2026-9511A vulnerability was identified in Totolink CA750-PoE 6.2c.51…6.3
• CVE-2026-9512A security flaw has been discovered in Totolink CA750-PoE 6.…6.3
• CVE-2026-9514A security vulnerability has been detected in Totolink CA750…6.3
• CVE-2026-9515A vulnerability was detected in Totolink CA750-PoE 6.2c.510.…6.3
• CVE-2026-9516Cpanel::JSON::XS versions before 4.41 for Perl allow denial …7.5
• CVE-2026-9517A vulnerability was determined in hemant6488 CodeIgniter-Stu…7.3
• CVE-2026-9518A vulnerability was identified in hemant6488 CodeIgniter-Stu…4.3
• CVE-2026-9519A security flaw has been discovered in stonith404 pingvin-sh…4.3