CVE-2026-5853 | Totolink A7100RU 7.4cu.2313_b20191024 CGI /cgi-bin/cstecgi.cgi setIpv6LanCfg addrPrefixLen os command injection

A vulnerability categorized as critical has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this vulnerability is the function setIpv6LanCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument addrPrefixLen leads to os command injection.

This vulnerability is listed as CVE-2026-5853. The attack may be performed from remote. In addition, an exploit is available.