CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-9387 — A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The...

·Source: NIST NVD

Updated:

Executive Summary

A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument resetFlags results in os command injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for

Analysis

A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument resetFlags results in os command injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. CVSS Score: 9.8. Published: 2026-05-24T15:16:28.537.

Indicators of Compromise (1)

CVE (1)
CVE-2026-9387
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on May 24, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Juspay joins Mastercard Engage network

Juspay, a leading global payments technology company, today announced that it has joined the Mastercard Engage partner network as a certified third-party partner for Mastercard Click to Pay.

Finextra
MEDIUMVulnerabilityNEW

Ripple brings RLUSD stablecoin to Turkey

Ripple, the leading provider of blockchain-based enterprise solutions across traditional and digital finance, today announced that its enterprise-grade, USD-backed stablecoin Ripple USD (RLUSD) is now available to institutions in Türkiye through three new partnerships with BiLira, Bitexen and Bitlo.

Finextra
MEDIUMVulnerabilityNEW

PayAngel taps Currencycloud to strengthen multicurrency accounts and payouts

PayAngel, a cross-border payments platform built by migrants and shaped by a lived understanding of the migrant journey, today announced an expanded collaboration with Visa, a world leader in digital payments.

Finextra