CVE-2026-7123

KRITISCH 9.8CVE-2026-7123 · Published 27/04/2026 · updated 26/10/2026

Kurz gesagt

CVE-2026-7123 ist eine Schwachstelle (KRITISCH (CVSS 9.8)).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.8%, höher als bei 78.1% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument setIptvCfg results in os command injection. The attack can be initiated remotely. The exploit has been made public and could be used.

References

Litengzheng/vuldb_new2
vuldb.com/submit/800995
vuldb.com/vuln/359722
vuldb.com/vuln/359722/cti
totolink.net

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free