CVE-2026-7548

HIGH

Totolink NR1800X cstecgi.cgi sub_41A68C command injection

Title source: cna

Description

A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. This affects the function sub_41A68C of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument setUssd results in command injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

References (5)

Core 5

Core References

Vdb Entry, Technical Description vdb-entry technical-description

VDB-360358 | Totolink NR1800X cstecgi.cgi sub_41A68C command injection

https://vuldb.com/vuln/360358

Signature, Permissions Required signature permissions-required

VDB-360358 | CTI Indicators (IOB, IOC, TTP, IOA)

https://vuldb.com/vuln/360358/cti

Third Party Advisory third-party-advisory

Submit #804417 | Totolink C834FR-1C NR1800X command injection

https://vuldb.com/submit/804417

Exploit exploit

https://github.com/newym/cve/blob/main/totolink%20nr1800x%20command%20injection.md

View Exploit ZIP pw:eip

Product product

https://www.totolink.net/

Scores

CVSS v3 8.8

EPSS 0.0149

EPSS Percentile 70.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-74 CWE-77

Status published

Products (1)

Totolink/NR1800X 9.1.0u.6279_B20210910

Published May 01, 2026

Tracked Since May 01, 2026