VulnSocial

CVE-2026-5995General

LOWCVSS 8.9 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function setMiniuiHomeInfoShow of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument lan_info can lead to os command injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

Back to dashboard
3.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-77CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Technical details provided in 3 signals
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 3 mentions (2026-04-10); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-04-10: 3Mentions · 2026-04-11: 1PoC Mentioned / Linked · 2026-04-10: 1Exploit Tool / Code · 2026-04-10: 1Technical Details · 2026-04-10: 304-1004-11
Signal classification3 categories
General
250.0%
Disclosure
125.0%
Exploit
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-04-103
Disclosure1Exploit1General1
2026-04-111
General1
Full discourse4 posts
  • CVEarity@CVEarity
    General

    ⚡ New CVE Alert: CVE-2026-5995 📊 Severity: 9.8 🚨 Risk Level: Critical 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5995 #CVE-2026-5995 #CVE #Critical #CyberSecurity #InfoSec https://t.co/sdSgbGQS9Z

    Post summary

    A short tweet announces the high‑severity CVE‑2026‑5995 with minimal detail, merely linking to the NVD record.

    0000041
    123 followersView on X
  • 0day Signal@0dayPublishing
    Exploit

    🚨 CVE-2026-5995: Totolink A7100RU CGI cstecgi.cgi ... Another ancient Totolink router with unauthenticated RCE via `lan_info` parameter - public exploit available, 9.3 CVSS, ... https://zerodaysignal.com/vulnerability/CVE-2026-5995 #netsec #vulnerability #CVE #sysadmin #zeroday

    Post summary

    CVE‑2026‑5995 is a high‑severity unauthenticated remote code execution vulnerability affecting Totolink routers, with a public exploit already available and a CVSS score of 9.3, but no patch or active exploitation reports are mentioned.

    0000044
    204 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-5995 A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function setMiniuiHomeInfoShow of the file /cgi-bin/cstecgi.cgi of the componen… https://www.cve.org/CVERecord?id=CVE-2026-5995

    Post summary

    The post reports CVE‑2026‑5995 affecting a specific function in a Totolink router, but offers no proof of exploitation, patch information, or evidence of active attacks.

    00000125
    57.0K followersView on X
  • CVEFind.com@CveFindCom
    Disclosure

    [CVE-2026-5995: CRITICAL] Totolink A7100RU 7.4cu.2313_b20191024 is vulnerable to OS command injection via lan_info parameter in setMiniuiHomeInfoShow function of /cgi-bin/cstecgi.cgi, allowing remote attacks.#cve,CVE-2026-5995,#cybersecurity https://cvefind.com/CVE-2026-5995

    Post summary

    The tweet announces a critical CVE-2026-5995 affecting Totolink routers, detailing the OS command injection vulnerability but not providing PoC, exploitation tool, or patch information.

    0000052
    619 followersView on X

Explore more

Back to dashboard