A8000RU vulnerabilities

50 known vulnerabilities in A8000RU from TOTOLINK. 50 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

50vulnerabilities

50critical

0high

0exploited

9.8average CVSS score

Latest first

9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9478May 25, 2026TOTOLINKEPSS 1.91%
A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setParentalRules of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Executing a manipulation of the argument enable can lead to os command
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9477May 25, 2026TOTOLINKEPSS 1.91%
A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setAccessDeviceCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument mac results in
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9476May 25, 2026TOTOLINKEPSS 1.91%
A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument admpass leads to os com
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9475May 25, 2026TOTOLINKEPSS 1.91%
A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. This manipulation of the argument Comment causes os command injection. R
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9458May 25, 2026TOTOLINKEPSS 2.09%
A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setWanCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument enabled leads to os command inj
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9457May 25, 2026TOTOLINKEPSS 2.09%
A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. This manipulation of the argument FileName causes os com
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9456May 25, 2026TOTOLINKEPSS 1.91%
A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setOpenVpnCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument enabled results in os command injection. The
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9455May 25, 2026TOTOLINKEPSS 1.91%
A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function UploadOpenVpnCert of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument FileName leads to os command
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9454May 25, 2026TOTOLINKEPSS 1.91%
A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setOpenVpnCertGenerationCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Executing a manipulation of the argument servername c
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9436May 25, 2026TOTOLINKEPSS 2%
A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setL2tpServerCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Executing a manipulation of the argument enable can lead to os comm
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9435May 25, 2026TOTOLINKEPSS 1.91%
A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setQosCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument enable results in os comm
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9434May 25, 2026TOTOLINKEPSS 1.73%
A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setWiFiWpsCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument wscDisabled leads to os com
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9433May 25, 2026TOTOLINKEPSS 1.73%
A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. This manipulation of the argument enable causes os command inj
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9432May 25, 2026TOTOLINKEPSS 1.73%
A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setWiFiAdvancedCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument bgProtection re
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9408May 25, 2026TOTOLINKEPSS 1.73%
A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. Affected by this issue is the function setStaticDhcpRules of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument enable results in os co
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9407May 25, 2026TOTOLINKEPSS 1.73%
A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. Affected by this vulnerability is the function setFirewallType of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument fire
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9406May 25, 2026TOTOLINKEPSS 1.73%
A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function setRemoteCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Executing a manipulation of the argument enable can lead to os command inj
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9405May 25, 2026TOTOLINKEPSS 1.73%
A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. This impacts the function setGameSpeedCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument enable results in os co
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9404May 24, 2026TOTOLINKEPSS 1.73%
A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument provider leads to os command injection. T
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9388May 24, 2026TOTOLINKEPSS 2.09%
A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Executing a manipulation of the argument mode can lead to os
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9387May 24, 2026TOTOLINKEPSS 1.73%
A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument resetFlags resu
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9386May 24, 2026TOTOLINKEPSS 1.73%
A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument lang leads to os command injection. Th
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9385May 24, 2026TOTOLINKEPSS 1.73%
A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. This manipulation of the argument command causes os command inj
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-9384May 24, 2026TOTOLINKEPSS 1.73%
A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument ip results in os command inj
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-7823May 5, 2026TOTOLINKEPSS 1.79%
A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function setAppFilterCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument enable results in os command injection. The attack may be launched remotely
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-7538May 1, 2026TOTOLINKEPSS 1.82%
A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function Vulnerability of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument proto leads to os command injection. The attac
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-7244Apr 28, 2026TOTOLINKEPSS 2.42%
A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument merge results in os command in
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-7243Apr 28, 2026TOTOLINKEPSS 2.45%
A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument maxRtrAdvInterval leads to os command injec
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-7242Apr 28, 2026TOTOLINKEPSS 2.45%
A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setOpenVpnClientCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument enabled can lead to os command injectio
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-7241Apr 28, 2026TOTOLINKEPSS 2.45%
A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument wifiOff results in os command injection.
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-7240Apr 28, 2026TOTOLINKEPSS 2.43%
A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setVpnAccountCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument User leads to os command injection
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-7204Apr 28, 2026TOTOLINKEPSS 2.45%
A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setPptpServerCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument enable causes os command injection. The at
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-7203Apr 28, 2026TOTOLINKEPSS 2.45%
A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument enable results in os command injection.
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-7202Apr 28, 2026TOTOLINKEPSS 2.45%
A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setWiFiWpsStart of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument wscDisabled leads to os command injection. The att
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-7156Apr 27, 2026TOTOLINKEPSS 1.79%
A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function CsteSystem of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument HTTP results in os command injection. The attack may be la
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-7155Apr 27, 2026TOTOLINKEPSS 1.77%
A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. This impacts the function setLoginPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument admpass leads to os command inject
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-7154Apr 27, 2026TOTOLINKEPSS 1.79%
A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setAdvancedInfoShow of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument tty_server can lead to os command inje
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-7153Apr 27, 2026TOTOLINKEPSS 1.77%
A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setMiniuiHomeInfoShow of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument sys_info results in
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-7152Apr 27, 2026TOTOLINKEPSS 1.77%
A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument telnet_enabled leads to os command inject
9.8 Critical severity
A8000RU: Improper Neutralization of Special Elements used in a Command
CVE-2026-7140Apr 27, 2026TOTOLINKEPSS 1.77%
A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function CsteSystem of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument HTTP leads to os command injection. The attack may be p