VulnSocial

CVE-2026-5994PoC

LOWCVSS 8.9 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This issue affects the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument telnet_enabled results in os command injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

Back to dashboard
1.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-77CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 2 signals
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 3 mentions (2026-04-10); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-04-10: 3Mentions · 2026-04-11: 1PoC Mentioned / Linked · 2026-04-10: 2Technical Details · 2026-04-10: 204-1004-11
Signal classification3 categories
PoC
250.0%
General
125.0%
Disclosure
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-04-103
General1PoC2
2026-04-111
Disclosure1
Full discourse4 posts
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-5994 📊 Severity: 9.8 🚨 Risk Level: Critical 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5994 #CVE-2026-5994 #CVE #Critical #CyberSecurity #InfoSec https://t.co/7YLfEaUe6R

    Post summary

    The tweet announces CVE‑2026‑5994 as a new critical vulnerability with a high CVSS score but offers no technical detail, proof of concept, or patch guidance.

    0000039
    123 followersView on X
  • 0day Signal@0dayPublishing
    PoC

    🚨 CVE-2026-5994: Totolink A7... Remote RCE via telnet_enabled param manipulation in Totolink routers - public exploit available, zero auth required. #RCE #RouterPwn #ZeroDay. https://zerodaysignal.com/vulnerability/CVE-2026-5994 #netsec #vulnerability #CVE #sysadmin #zeroday

    Post summary

    The tweet announces a Remote RCE in Totolink A7 routers caused by manipulating the telnet_enabled parameter and notes a publicly available exploit, though no detailed code is provided.

    0000075
    204 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-5994 A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This issue affects the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of the compo… https://www.cve.org/CVERecord?id=CVE-2026-5994

    Post summary

    The post notes the discovery of CVE‑2026‑5994 affecting a specific function in a Totolink router, but provides no additional technical, exploit, or remediation details.

    00000134
    57.0K followersView on X
  • CVEFind.com@CveFindCom
    PoC

    [CVE-2026-5994: CRITICAL] Security flaw in Totolink A7100RU 7.4cu.2313_b20191024: remote OS command injection via manipulation of telnet_enabled argument in /cgi-bin/cstecgi.cgi component. Exploit released.#cve,CVE-2026-5994,#cybersecurity https://cvefind.com/CVE-2026-5994

    Post summary

    The tweet announces a critical command‑injection vulnerability in Totolink routers and notes that an exploit has been released, providing a link to more details, but it does not provide a specific exploit tool or evidence of active attacks.

    0000062
    619 followersView on X

Explore more

Back to dashboard