CVE-2026-47137

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-47137 identifies a security vulnerability found in Totolink A8000RU firmware version 7.1cu.643_b20200521. This flaw specifically impacts the `setStorageCfg` function located within the `/cgi-bin/cstecgi.cgi` file, which is part of the device's CGI Handler component. The vulnerability allows for OS command injection through the manipulation of the `sambaEnabled` argument. This issue can be exploited remotely, and details of the exploit have been publicly disclosed.

Description
-

Social media

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score

8

  1. vm2 cve*3 1 Critical10/ 10 2 high CVE-2026-47137 CVE-2026-47209 CVE-2026-47135 https://t.co/mVLkWf7QCs

    @q1uf3ng

    19 May 2026

    4469 Impressions

    3 Retweets

    46 Likes

    22 Bookmarks

    0 Replies

    0 Quotes

References

Sources include official advisories and independent security research.