Totolink - A8000ru - CRITICAL - CVE-2026-9387. A security flaw has been identified in the Totolink A8000RU's web management interface, specifically within the function setUpgradeFW of the /cgi-bin/cstecgi.cgi file. By manipulating the resetFlags argument, an attacker can execute OS commands remotely, exposing the system to potential exploitation. The details of the exploit have been made public, raising concerns for users of the affected product. BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io