Totolink A7000R cstecgi.cgi setUnloadUserData command injection

What is CVE-2026-1547?

Original source data

A vulnerability was detected in Totolink A7000R 4.1cu.4154. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument plugin_name results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.

Verify to continue the analysis

A short verification protects the vulnerability source and prevents automated AI abuse.

Overview

Original source data

A vulnerability was detected in Totolink A7000R 4.1cu.4154. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument plugin_name results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.

Affected products and scope

CyStack is analyzing this vulnerability. The page will update automatically when the analysis is ready.

Technical details

CyStack is analyzing this vulnerability. The page will update automatically when the analysis is ready.

Exploitability

CyStack is analyzing this vulnerability. The page will update automatically when the analysis is ready.

Technical impact

CyStack is analyzing this vulnerability. The page will update automatically when the analysis is ready.

Business impact

CyStack is analyzing this vulnerability. The page will update automatically when the analysis is ready.

Remediation

CyStack is analyzing this vulnerability. The page will update automatically when the analysis is ready.

Detection

CyStack is analyzing this vulnerability. The page will update automatically when the analysis is ready.

Sources (3)

GCVE / Vulnerability-Lookup

Other references

Learn more

Run an in-depth assessment with complete web risk management

CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.

Explore CyStack VulnScan

Explore other related solutions

A7000R

Totolink

View all security vulnerabilities