CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-6115 — A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the...

·Source: NIST NVD

Updated:

Executive Summary

A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setAppCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument enable can lead to os command injection. The attack may be launched remotely. The exploit has been published and may be used.

Analysis

A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setAppCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument enable can lead to os command injection. The attack may be launched remotely. The exploit has been published and may be used. CVSS Score: 9.8. Published: 2026-04-12T05:16:00.807.

Indicators of Compromise (1)

CVE (1)
CVE-2026-6115
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Apr 12, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

How to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943 and CVE-2026-111944)

Executive Summary A critical certificate authority incident disclosed on October 17, 2026, impacts eight eMudhra intermediate CA certificates. A flaw in the key generation process could allow attackers to recover private keys and issue fraudulent TLS or code-signing certificates. The affected intermediates have been revoked and blocked by major platform vendors, including Chrome, Mozilla, Apple, [

CVE-2026-111943CVE-2026-111944
Qualys Blog
LOWVulnerability

Analysts Urge US to Follow UK's Lead on Undersea Cable Law

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/analysts-urge-us-to-follow-uks-lead-on-undersea-cable-law-image_small-2-a-33198.jpg" align=right hspace=4><b>UK Proposes Crisis Powers Over Cable Operators and Up to 14 Years for Sabotage</b><br>Security analysts say Washington should update its 1888 undersea cable law after London proposed letting ministers direct cable operators

Bank Info Security
LOWVulnerability

Why HR Belongs at the Center of AI Change

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/hr-belongs-at-center-ai-change-image_small-7-a-33196.jpg" align=right hspace=4><b>Netskope Exec Mike Anderson on Trust, Training and Change Management</b><br>AI adoption can unsettle employees who fear being replaced, even as leaders expect them to use new tools. Netskope CDIO Mike Anderson explains why CIOs should work with HR on

Bank Info Security