CVE-2026-0641 | TOTOLINK WA300 5.2cu.7112_B20190227 cstecgi.cgi sub_401510 UPLOAD_FILENAME command injection

A vulnerability, which was classified as critical, has been found in TOTOLINK WA300 5.2cu.7112_B20190227. This vulnerability affects the function sub_401510 of the file cstecgi.cgi. The manipulation of the argument UPLOAD_FILENAME leads to command injection.

This vulnerability is listed as CVE-2026-0641. The attack may be initiated remotely. In addition, an exploit is available.