{"id":"CVE-2026-7720","state":"PUBLISHED","title":"Totolink WA300 POST Request cstecgi.cgi setLanguageCfg command injection","description":"A weakness has been identified in Totolink WA300 5.2cu.7112_B20190227. The impacted element is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. This manipulation of the argument langType causes command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.","publishedAt":"2026-05-04T01:45:14.135Z","updatedAt":"2026-05-04T12:55:27.383Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["Totolink WA300"],"affected":[{"vendor":"Totolink","product":"WA300","versions":[{"version":"5.2cu.7112_B20190227","status":"affected"}],"cpes":["cpe:2.3:o:totolink:wa300_firmware:*:*:*:*:*:*:*:*"],"modules":["POST Request Handler"]}],"references":["https://vuldb.com/vuln/360896","https://vuldb.com/vuln/360896/cti","https://vuldb.com/submit/807198","https://lavender-bicycle-a5a.notion.site/TOTOLINK-WA300-setLanguageCfg-34553a41781f8007b6c5c7964d424286","https://www.totolink.net/"],"weaknesses":["CWE-77","CWE-74"],"ingestedAt":"2026-10-29T20:13:07.220Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/7xxx/CVE-2026-7720.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-7720","state":"PUBLISHED","datePublished":"2026-05-04T01:45:14.135Z","dateUpdated":"2026-05-04T12:55:27.383Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-05-03T08:09:46.636Z"},"containers":{"cna":{"title":"Totolink WA300 POST Request cstecgi.cgi setLanguageCfg command injection","descriptions":[{"lang":"en","value":"A weakness has been identified in Totolink WA300 5.2cu.7112_B20190227. The impacted element is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. This manipulation of the argument langType causes command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks."}],"affected":[{"vendor":"Totolink","product":"WA300","versions":[{"version":"5.2cu.7112_B20190227","status":"affected"}],"cpes":["cpe:2.3:o:totolink:wa300_firmware:*:*:*:*:*:*:*:*"],"modules":["POST Request Handler"]}],"references":[{"url":"https://vuldb.com/vuln/360896","name":"VDB-360896 | Totolink WA300 POST Request cstecgi.cgi setLanguageCfg command injection","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/360896/cti","name":"VDB-360896 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/submit/807198","name":"Submit #807198 | Totolink WA300 WA300 V5.2cu.7112_B20190227 Command Injection","tags":["third-party-advisory"]},{"url":"https://lavender-bicycle-a5a.notion.site/TOTOLINK-WA300-setLanguageCfg-34553a41781f8007b6c5c7964d424286","tags":["exploit"]},{"url":"https://www.totolink.net/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-77","type":"CWE","lang":"en","description":"Command Injection"}]},{"descriptions":[{"cweId":"CWE-74","type":"CWE","lang":"en","description":"Injection"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-05-04T01:45:14.135Z"},"timeline":[{"time":"2026-05-03T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-05-03T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-05-03T10:14:53.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"wxhwxhwxh_mie (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-04T12:55:20.328065Z","id":"CVE-2026-7720","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-04T12:55:27.383Z"}}]}}}