Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-7633

Totolink N300RH cstecgi.cgi setUploadSetting file inclusion

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was identified in Totolink N300RH 6.1c.1353_B20190305. This impacts the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument FileName leads to file inclusion. The attack may be performed from remote. The exploit is publicly available and might be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Totolink N300RH

  • 6.1c.1353_B20190305affected

References