Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument telnet_enabled leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-27 | 1 | General1 |
| 2026-04-28 | 1 | Patch1 |
🚨 CVE-2026-7152 — CVSS 9.8/10 ██████████ A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/YTVDGGzqn1
Post summary
The tweet alerts to a critical vulnerability (CVE‑2026‑7152) in Totolink A8000RU with a CVSS score of 9.8, and indicates that a patch is now available.
CVE-2026-7152 Remote OS Command Injection in Totolink A8000RU 7.1cu.643_... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7152 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The post briefly alerts that CVE-2026-7152 is a remote OS command injection in a Totolink router. It offers a link to vulnerability details but contains no further technical, exploit, or patch information.