Note: This data is for reference and cybersecurity research purposes only.CyStack advises users not to use this information for unlawful purposes.
CVE-2026-1547 is a vulnerability classified as Improper Neutralization of Special Elements used in a Command and Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), affecting A7000R (affected versions: 4.1cu.4154). This vulnerability is rated Medium, with a CVSS score of 5.3. Public exploit code or evidence is available for this vulnerability, but that does not confirm exploitation in the wild.
A short verification protects the vulnerability source and prevents automated AI abuse.
Verifying...
A vulnerability was detected in Totolink A7000R 4.1cu.4154. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument plugin_name results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
en
