CVE-2026-7548 | Totolink NR1800X 9.1.0u.6279_B20210910 /cgi-bin/cstecgi.cgi sub_41A68C setUssd command injection

A vulnerability marked as critical has been reported in Totolink NR1800X 9.1.0u.6279_B20210910. This affects the function sub_41A68C of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument setUssd results in command injection.

This vulnerability is reported as CVE-2026-7548. The attack is possible to be carried out remotely. Moreover, an exploit is present.