Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setNtpCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument tz results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-07 | 1 | Disclosure1 |
| 2026-04-20 | 2 | Disclosure1General1 |
CVE-2026-5689 A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setNtpCfg of the file /cgi-bin/cstecgi.cgi. Performing a man… https://www.cve.org/CVERecord?id=CVE-2026-5689
Post summary
A new CVE (CVE-2026-5689) affecting Totolink A7100RU's setNtpCfg function in cstecgi.cgi has been identified; no PoC, exploit, or mitigation details are provided.
🚨*CVE* CVE-2026-5689 A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setNtpCfg of the file /cgi-bin/cstecgi.cgi. Performing a man… https://www.cve.org/CVERecord?id=CVE-2026-5689 ----- Traducción: CVE-2026-5689 Se … http://infoflow.cloud`
Post summary
The tweet merely notes a CVE affecting Totolink router’s NTP configuration function without providing exploitation details, patch information, or technical specifics.
CVE-2026-5689 Remote Command Injection in Totolik A7100RU 7.4cu.2313_b20191024 setNtpCfg https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5689
Post summary
CVE‑2026‑5689 is publicly disclosed as a remote command injection flaw in Totolik A7100RU firmware (setNtpCfg), with no PoC, exploit, or patch information provided.