Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument pptpPassThru leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-09 | 6 | Disclosure4Patch2 |
| 2026-04-10 | 1 | Disclosure1 |
| 2026-04-13 | 1 | Exploit1 |
CVE-2026-5850 A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the component CGI H… https://www.cve.org/CVERecord?id=CVE-2026-5850
Post summary
The post briefly announces the presence of CVE‑2026‑5850 in the Totolink A7100RU router, indicating the affected function and file but lacks further exploitation or remediation details.
🚨 CVE-2026-5850 — CVSS 9.8/10 ██████████ A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setVpnPassCfg of the... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/65Js7MfpF2
Post summary
The tweet announces a critical vulnerability in a Totolink router and highlights that a patch is now available, with no evidence of active exploitation or proof‑of‑concept.
🚨 CVE-2026-5850: Totolink A7100RU CGI cstecgi.cgi ... Another Totolink router with unauthenticated RCE via CGI parameter injection - public exploit available for this 9.3 CVS... https://zerodaysignal.com/vulnerability/CVE-2026-5850 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The post announces CVE-2026-5850, an unauthenticated remote code execution bug in Totolink routers, noting that a public exploit is available via the provided link.
⚡ New CVE Alert: CVE-2026-5850 📊 Severity: 9.8 🚨 Risk Level: Critical 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5850 #CVE-2026-5850 #CVE #Critical #CyberSecurity #InfoSec https://t.co/qgd3wfz9Yp
Post summary
A succinct alert announcing CVE-2026-5850 with a high severity rating, but no additional technical details, PoC, or mitigation information.
CVE-2026-5850 OS Command Injection in Totolink A7100RU 7.4cu.2313_b20191024 CGI Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5850
Post summary
CVE-2026-5850, an OS Command Injection flaw affecting Totolink A7100RU routers, has been disclosed, providing technical details but no evidence of exploitation or mitigation.
🚨*CVE* CVE-2026-5850 A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the component CGI H… https://www.cve.org/CVERecord?id=CVE-2026-5850 ----- Traducción: CVE-2026-5850 Se … http://infoflow.cloud`
Post summary
The post announces CVE-2026-5850 in Totolink A7100RU, noting it affects the setVpnPassCfg function, but it does not provide any PoC, exploit, active usage, patch, or detailed technical vulnerability data.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5850 - Totolink A7100RU CGI cstecgi.cgi setVpnPassCfg os command injection Intel Report: https://ift.tt/RkVAy0g
Post summary
The post announces a new OS command injection vulnerability (CVE-2026-5850) affecting the Totolink A7100RU device, providing technical details but no PoC, exploit code, active exploitation, or patch information.
[CVE-2026-5850: CRITICAL] Critical vulnerability identified in Totolink A7100RU! Disable remote access & update firmware immediately to prevent potential cyber attacks. #CyberSecurity#cve,CVE-2026-5850,#cybersecurity https://cvefind.com/CVE-2026-5850
Post summary
The post focuses on urging users to disable remote access and update firmware, highlighting a patch/workaround, without providing PoC or exploitation details.