Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This impacts the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument enable leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
🚨 CVE-2026-7122 — CVSS 9.8/10 ██████████ A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This impacts the function setUPnPCfg of the... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/hSUu8d4jqz
Post summary
The tweet announces a critical CVE-2026-7122 affecting Totolink A8000RU’s setUPnPCfg function and urges users to apply the available patch.
CVE-2026-7122 A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This impacts the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handl… https://www.cve.org/CVERecord?id=CVE-2026-7122
Post summary
A new vulnerability (CVE-2026-7122) has been identified in the Totolink A8000RU router, affecting the setUPnPCfg function in /cgi-bin/cstecgi.cgi. No PoC, exploit, or patch information is provided.