CVE-2026-5689 | Totolink A7100RU 7.4cu.2313_b20191024 /cgi-bin/cstecgi.cgi setNtpCfg tz os command injection

A vulnerability classified as critical has been found in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setNtpCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument tz results in os command injection.

This vulnerability is known as CVE-2026-5689. Remote exploitation of the attack is possible. Furthermore, an exploit is available.