EUVD-2026-26795Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
6DescriptionCVE.org
A vulnerability was identified in Totolink N300RH 6.1c.1353_B20190305. This impacts the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument FileName leads to file inclusion. The attack may be performed from remote. The exploit is publicly available and might be used.
AnalysisAI
External file inclusion in Totolink N300RH firmware 6.1c.1353_B20190305 allows remote unauthenticated attackers to manipulate the FileName parameter in the setUploadSetting function via /cgi-bin/cstecgi.cgi, enabling arbitrary file writes and denial of service. Publicly available exploit code exists, and the vulnerability carries a CVSS score of 6.5 reflecting network-accessible attack vector with low complexity.
Technical ContextAI
The vulnerability exists in the cstecgi.cgi CGI script, a common administrative interface in Totolink routers. The setUploadSetting function fails to properly validate the FileName parameter before using it in file operations, enabling path traversal or file inclusion attacks. CWE-73 (External Control of File Name or Path) describes this root cause class where user-supplied input is used directly in file system operations without sanitization. The affected product is a wireless router (N300RH) running embedded firmware, making it an attractive IoT target. The vulnerability allows attackers to write arbitrary files to the system or include malicious files through improper path handling.
RemediationAI
Vendor patch information is not available in the provided references. Users should immediately check Totolink's official website (https://www.totolink.net/) and support portal for firmware updates addressing CVE-2026-7633. If a patched firmware version is released, apply it immediately via the device's web interface or TFTP recovery method. As a temporary compensating control, restrict network access to the /cgi-bin/cstecgi.cgi endpoint using firewall rules or access control lists - block all external access to the router's administrative interface on port 80/443 unless administration is required, and use only trusted networks for management. Disable UPnP and remote management features if enabled, as they may provide alternative attack vectors. Isolate the router on a separate management VLAN if possible. These mitigations reduce attack surface but do not eliminate the vulnerability; patching is the definitive fix once available.
OS command injection in the Totolink N300RH router (firmware 6.1c.1353_B20190305) allows remote unauthenticated attacker
Stack-based buffer overflow in the Totolink N300RH router (firmware 6.1c.1353_B20190305) allows remote attackers to corr
Remote unauthenticated attackers can execute arbitrary code on Totolink N300RH routers version 3.2.4-B20220812 by sendin
Remote authenticated attackers can execute arbitrary code on Totolink N300RH 3.2.4-B20220812 routers via buffer overflow
Buffer overflow in Totolink N300RH router firmware 3.2.4-B20220812 allows authenticated remote attackers to achieve comp
Buffer overflow in Totolink N300RH router firmware 3.2.4-B20220812 enables authenticated remote attackers to achieve cod
Remote code execution in Totolink N300RH firmware 6.1c.1353_B20190305 allows unauthenticated network attackers to execut
Same weakness CWE-73 – External Control of File Name or Path
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today