A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Apr 27, 2026 · NIST NVD

   Detected

   A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument tz results in os command injection. The attack can be executed remotely. The exploit is now public and may be used.

2. Jun 17, 2026 · NIST NVD

   Updated

   A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument tz results in os command injection. The attack can be executed remotely. The exploit is now public and may be used.

Sources

• CVE.orgVulnerability recordCVE-2026-7138

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-7138

  A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument tz results in os command injection. The attack can be executed r

  nvd.nist.gov

References

• Reference · github.com
• Reference · vuldb.com
• Reference · vuldb.com
• Reference · vuldb.com
• Reference · totolink.net