Логотип exploitDog
bind:CVE-2026-1149
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2026-1149

Количество 3

Количество 3

nvd логотип

CVE-2026-1149

16 дней назад

A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument ip leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

CVSS3: 6.3
EPSS: Низкий
github логотип

GHSA-m898-gr28-h7qx

16 дней назад

A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument ip leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

CVSS3: 6.3
EPSS: Низкий
fstec логотип

BDU:2026-00612

около 1 года назад

Уязвимость функции setDiagnosisCfg() микропрограммного обеспечения роутеров TOTOLINK LR350, позволяющая нарушителю выполнить произвольные команды

CVSS3: 6.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2026-1149

A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument ip leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

CVSS3: 6.3
4%
Низкий
16 дней назад
github логотип
GHSA-m898-gr28-h7qx

A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument ip leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

CVSS3: 6.3
4%
Низкий
16 дней назад
fstec логотип
BDU:2026-00612

Уязвимость функции setDiagnosisCfg() микропрограммного обеспечения роутеров TOTOLINK LR350, позволяющая нарушителю выполнить произвольные команды

CVSS3: 6.3
4%
Низкий
около 1 года назад

Уязвимостей на страницу