CVE-2026-9476Patch

LOWCVSS 8.9 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument admpass leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-77CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Full discourse1 post

DFIR Lab@DFIR_Lab91d
Patch
🚨 CRITICAL: CVE-2026-9476 (CVSS 9.8) - OS Command Injection in Totolink A8000RU router Web Management Interface. Remotely exploitable, no auth required. Public exploit available. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel #DFIR https://t.co/hryxHOhx7U
Post summary
CVE‑2026‑9476 is a critical OS command injection flaw in Totolink routers that can be exploited remotely without authentication; a patch is urgently required, though no active exploitation has been reported.
0000046
96 followersView on X

Explore more

Back to dashboard