Medium severity6.3NVD Advisory· Published May 25, 2026· Updated May 26, 2026
CVE-2026-9512
CVE-2026-9512
Description
A security flaw has been discovered in Totolink CA750-PoE 6.2c.510. This vulnerability affects the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Performing a manipulation of the argument admuser/admpass results in os command injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
5News mentions
1- Totolink CA750-PoE: Nine OS Command Injection CVEs Land in a Single BatchVypr Intelligence · May 26, 2026