Command Injection Flaw in Totolink A8000RU Router

⚠️ CVE-Referenzen: CVE-2026-7823
Totolink - A8000ru - CRITICAL - CVE-2026-7823. A security flaw has been identified in the Totolink A8000RU router, specifically within the setAppFilterCfg function in cgi-bin/cstecgi.cgi. This vulnerability allows for remote command injection via manipulation of the 'enable' argument. An attacker can exploit this flaw to execute arbitrary commands on the affected device, potentially compromising system integrity and confidentiality. The exploit is publicly available, increasing the urgency for users to secure their devices and apply any available patches. BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io
Quelle: securityvulnerability.io