Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 04:13:54 +0000 cnvd-2026-32393 https://cve.radiocsirt.org/vuln/cnvd-2026-32393 cnvd-2026-32393 https://cve.radiocsirt.org/vuln/cnvd-2026-32393 EUVD-2026-321312 https://cve.radiocsirt.org/vuln/euvd-2026-321312 EUVD-2026-321312 https://cve.radiocsirt.org/vuln/euvd-2026-321312 fkie_cve-2026-9455 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9455 <p>A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function UploadOpenVpnCert of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument FileName leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.</p> <p>A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function UploadOpenVpnCert of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument FileName leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-9455 GHSA-4crh-78xh-vwrj https://cve.radiocsirt.org/vuln/ghsa-4crh-78xh-vwrj <p>A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function UploadOpenVpnCert of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument FileName leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.</p> <p>A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function UploadOpenVpnCert of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument FileName leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.</p> https://cve.radiocsirt.org/vuln/ghsa-4crh-78xh-vwrj