CVE-2026-1548 | Totolink A7000R 4.1cu.4154 /cgi-bin/cstecgi.cgi CloudACMunualUpdateUserdata url command injection

A vulnerability was found in Totolink A7000R 4.1cu.4154. It has been rated as critical. This impacts the function CloudACMunualUpdateUserdata of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument url causes command injection.

This vulnerability is handled as CVE-2026-1548. The attack can be initiated remotely. Additionally, an exploit exists.