A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of …

A critical security vulnerability (CVE-2026-7137) has been identified in Totolink A8000RU router firmware version 7.1cu.643_b20200521. The vulnerability exists in the setStorageCfg function within the /cgi-bin/cstecgi.cgi file of the CGI Handler component. Attackers can exploit this flaw by manipulating the sambaEnabled argument to achieve OS command injection. The vulnerability allows for remote exploitation and poses significant security risks. Public exploits have been disclosed and are available for use, making this a high-priority security concern for affected devices.