CVE-2026-7548
HIGH
NVD
CVSS Score
8.8
Severity
HIGH
Published
May 01, 2026
Vendor
unknown
Description
A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. This affects the function sub_41A68C of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument setUssd results in command injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.