Medium severity6.3NVD Advisory· Published May 26, 2026· Updated May 26, 2026

CVE-2026-9534

Description

A flaw has been found in Totolink CA750-PoE 6.2c.510. This affects the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Executing a manipulation of the argument PIN can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/DIR-816references
Totolink/CA750-PoEllm-create
Range: = 6.2c.510

Patches

Vulnerability mechanics

References

github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_57/57.mdnvd
vuldb.com/submit/813938nvd
vuldb.com/vuln/365561nvd
vuldb.com/vuln/365561/ctinvd
www.totolink.netnvd

News mentions

Totolink CA750-PoE: Nine OS Command Injection CVEs Land in a Single Batch
Vypr Intelligence · May 26, 2026

cvss	0.410
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000