EUVD-2026-78822
GHSA-q4rv-4ppf-7295
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability has been found in TOTOLINK X5000R 9.1.0cu.2089_B20211224. The impacted element is the function exportOvpn of the file /cgi-bin/cstecgi.cgi?action=exportOvpn&type=user of the component Export Ovpn Handler. The manipulation of the argument filetype leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
AnalysisAI
OS command injection in the exportOvpn handler of the TOTOLINK X5000R router firmware (9.1.0cu.2089_B20211224 and potentially other versions) allows an authenticated web-UI user to inject shell metacharacters through the 'filetype' argument supplied to /cgi-bin/cstecgi.cgi?action=exportOvpn&type=user, resulting in commands executed with the privileges of the underlying CGI process. The flaw is remotely reachable (CVSS 4.0 AV:N/AC:L/AT:N/PR:L/UI:N) and publicly available exploit code exists, so any X5000R with an exposed or weakly-credentialed management interface should be treated as at risk. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today