Login Request a demo
Medium severity · published Jan 29, 2026
CVE-2026-1623
Totolink A7000R cstecgi.cgi setUpgradeFW command injection
6.3
CVSS
2.4%
EPSS
No
On KEV
Description
A weakness has been identified in Totolink A7000R 4.1cu.4154. Impacted is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument FileName causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
A7
A7000R · Totolink
4.1cu.4154 · source: vendor
AF
A7000r Firmware · Totolink
4.1cu.4154 · source: NVD
Affected product
A7
A7000R
Totolink
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-1623
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-1623
Exploit
https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/04_RCE_setUpgradeFW_RCE.md
Exploit
https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A7000R/04_RCE_setUpgradeFW_RCE.md#poc
Permissions Required
https://vuldb.com/?ctiid.343382
Third Party Advisory
https://vuldb.com/?id.343382
Third Party Advisory
https://vuldb.com/?submit.740767
Product
https://www.totolink.net/
More from A7000R
9.8
CVE-2026-1547
Totolink A7000R cstecgi.cgi setUnloadUserData command injection
9.8
CVE-2025-51452
In TOTOLINK A7000R firmware 9.1.0u.6115_B20201022, an attacker can bypass login by sending a specific request through formLoginAuth.htm
9.8
CVE-2024-28639
Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to execute arbitrary code and cause a denial of…
9.8
CVE-2023-49418
TOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFilterRules
9.8
CVE-2023-49417
TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg