Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setWiFiGuestCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument wifiOff leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-10 | 2 | Disclosure1Exploit1 |
| 2026-04-11 | 1 | General1 |
CVE-2026-5993 A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setWiFiGuestCfg of the file /cgi-bin/cstecgi.cgi of the… https://www.cve.org/CVERecord?id=CVE-2026-5993
Post summary
A new vulnerability in the TOTOLINK A7100RU router firmware was disclosed, affecting the setWiFiGuestCfg function in cstecgi.cgi; no PoC, exploit, or patch information is provided.
⚡ New CVE Alert: CVE-2026-5993 📊 Severity: 9.8 🚨 Risk Level: Critical 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5993 #CVE-2026-5993 #CVE #Critical #CyberSecurity #InfoSec https://t.co/PhH9UU2fxa
Post summary
The tweet merely states the existence of a new critical CVE with a reference to the NVD page, lacking additional technical or exploit information.
[CVE-2026-5993: CRITICAL] Critical vulnerability found in Totolink A7100RU 7.4cu.2313_b20191024 allows remote code execution with os command injection. Attack exploit is public and dangerous.#cve,CVE-2026-5993,#cybersecurity https://cvefind.com/CVE-2026-5993
Post summary
The post announces a critical CVE with remote code execution via command injection and states that a public exploit exists, though it provides no evidence of actual exploitation or a patch.