Exploitation observed; activity peaked at 6 mentions and remains active
Recommended action window: Immediate (within 24h)
NVD description
A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function setAppFilterCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument enable results in os command injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-05 | 4 | Disclosure3Patch1 |
| 2026-05-12 | 1 | Active Exploitation1 |
| 2026-05-15 | 6 | Disclosure1General5 |
| 2026-05-16 | 1 | Exploit1 |
Our CTI team identified a lot of activities targeting Totolink A8000RU (CVE-2026-7823) https://vuldb.com/vuln/361075/cti
Post summary
CTI team reports widespread targeting of Totolink A8000RU via CVE‑2026‑7823, indicating active exploitation but no additional technical or mitigation details are provided.
Unpopular opinion: The cybersecurity industry is selling you dashboards. CVE: CVE-2026-7823 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The post simply references a critical CVE with its CVSS score but otherwise lacks details on exploitation, patches, or PoC.
References CVE: CVE-2026-7823 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The text lists a critical CVE with its CVSS score and severity but offers no PoC, exploit, or patch details.
CVE: CVE-2026-7823 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory A security flaw has been discovered in Totolink A8000RU 7.1cu.643b20200521.
Post summary
The text announces a critical vulnerability (CVE‑2026‑7823) in Totolink A8000RU routers, providing CVSS metrics but no PoC, exploit details, or patch information.
CRITICAL: CVE-2026-7823 (CVSS 9.8) — multiple products. CVE: CVE-2026-7823 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The advisory signals a critically scored CVE-2026-7823 with no additional details on patches, exploits, or active use.
🚨 CVE-2026-7823 — CVSS 9.8/10 ██████████ A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function setAppFilterCfg... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/vgXA1aWh0n
Post summary
CVE-2026-7823 is a critical vulnerability in Totolink A8000RU, with a patch now available; no PoC, exploitation, or false‑positive claim was reported.
CVE-2026-7823 A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function setAppFilterCfg of the file /cgi-bin/cstecgi.cgi. The manipulation… https://www.cve.org/CVERecord?id=CVE-2026-7823
Post summary
The text announces the discovery of CVE-2026-7823 in a Totolink router firmware, noting a flaw in the setAppFilterCfg function, with a link to the CVE record for further details.
A critical OS command injection flaw (CVE-2026-7823) affects Totolink A8000RU routers. With a public exploit released, businesses should urgently update or isolate these devices to prevent remote attacks. Stay proactive in securing your network. #Cybersecurity
Post summary
CVE-2026-7823 is a critical OS command injection flaw in Totolink A8000RU routers with a publicly released exploit; users are urged to update or isolate devices to prevent remote attacks.
https://lyrie.ai/research/research/cve-2026-7823-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The message links to an advisory for CVE‑2026‑7823 but offers no explicit information about PoC, exploitation, patches, technical specifics, or false positive claims.
https://lyrie.ai/research/research/cve-2026-7823-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The post advertises a CVE advisory via a link and hashtags but offers no substantive technical, exploit, or patch information.
🚨*CVE* CVE-2026-7823 A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function setAppFilterCfg of the file /cgi-bin/cstecgi.cgi. The manipulation… https://www.cve.org/CVERecord?id=CVE-2026-7823 ----- Traducción: CVE-2026-7823 Se … http://infoflow.cloud`
Post summary
The announcement reports a CVE affecting the Totolink A8000RU's setAppFilterCfg function, providing brief technical details but no PoC, exploit, or patch information.
CVE-2026-7823 Remote Command Injection in Totolink A8000RU 7.1cu.643_b20200521 setAppFilterCfg https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7823
Post summary
The entry lists CVE-2026-7823 as a remote command injection flaw in Totolink firmware, without indicating a PoC, exploit tool, active exploitation, or patch.