CVE-2026-0641: TOTOLINK WA300 cstecgi.cgi sub_401510 command injection

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-01-06 · updated 2026-10-26
Weakness: CWE-74

Description

A security vulnerability has been detected in TOTOLINK WA300 5.2cu.7112_B20190227. This vulnerability affects the function sub_401510 of the file cstecgi.cgi. The manipulation of the argument UPLOAD_FILENAME leads to command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

Affected products

Totolink WA300: 5.2cu.7112_b20190227

References

https://github.com/JackWesleyy/CVE/blob/main/WA300/TOTOLINK_WA300_RCE.md
https://github.com/JackWesleyy/CVE/blob/main/WA300/TOTOLINK_WA300_RCE.md#poc
https://vuldb.com/?ctiid.339684
https://vuldb.com/?id.339684
https://vuldb.com/?submit.732234
https://www.totolink.net/

Get alerted when CVE-2026-0641 or the next vulnerability affects your stack