CVE-2026-2167 | Totolink WA300 5.2cu.7112_B20190227 /cgi-bin/cstecgi.cgi setAPNetwork Ipaddr os command injection

A vulnerability was found in Totolink WA300 5.2cu.7112_B20190227. It has been declared as critical. The impacted element is the function setAPNetwork of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Ipaddr results in os command injection.

This vulnerability was named CVE-2026-2167. The attack may be performed from remote. In addition, an exploit is available.