CVE-2026-9515

A vulnerability was detected in Totolink CA750-PoE 6.2c.510. The affected element is the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation of the argument plugin_version results in os command injection. The attack may be launched remotely. The exploit is now public and may be used.

• CWE-77
• CWE-78

• https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_53/53.md
• https://vuldb.com/submit/813927
• https://vuldb.com/vuln/365515
• https://vuldb.com/vuln/365515/cti
• https://www.totolink.net/

Published

May 26, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-9508Incorrect permission settings on a critical resource in Supr…10
• CVE-2026-9509An unhandled exception in Suprema BioStar 2 (Server), versio…8.7
• CVE-2026-9511A vulnerability was identified in Totolink CA750-PoE 6.2c.51…6.3
• CVE-2026-9512A security flaw has been discovered in Totolink CA750-PoE 6.…6.3
• CVE-2026-9513A weakness has been identified in Totolink CA750-PoE 6.2c.51…6.3
• CVE-2026-9514A security vulnerability has been detected in Totolink CA750…6.3
• CVE-2026-9516Cpanel::JSON::XS versions before 4.41 for Perl allow denial …7.5
• CVE-2026-9517A vulnerability was determined in hemant6488 CodeIgniter-Stu…7.3
• CVE-2026-9518A vulnerability was identified in hemant6488 CodeIgniter-Stu…4.3
• CVE-2026-9519A security flaw has been discovered in stonith404 pingvin-sh…4.3
• CVE-2026-9520A weakness has been identified in blitz-js blitz up to 3.0.2…4.3
• CVE-2026-9521A security vulnerability has been detected in fraillt bitser…7.3