CVE-2026-7721
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
May 04, 2026
Vendor
unknown
Description
A security vulnerability has been detected in Totolink WA300 5.2cu.7112_B20190227. This affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument hostTime leads to command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.