What is GHSA-h6vr-9r9p-c6rf?

GHSA-h6vr-9r9p-c6rf is a security advisory published by GitHub Security Advisories with High severity. A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the...

Which CVE IDs does GHSA-h6vr-9r9p-c6rf cover?

GHSA-h6vr-9r9p-c6rf covers the following CVE IDs: CVE-2026-9433. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h6vr-9r9p-c6rf?

GHSA-h6vr-9r9p-c6rf has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-h6vr-9r9p-c6rfHighCVSS 9.8

A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the...

Vendor

GitHub Security Advisories

Published

May 26, 2026

Last Modified

May 26, 2026

🔗 CVE IDs covered (1)

CVE-2026-9433 →

📋 Description

A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. This manipulation of the argument enable causes os command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2026-9433
https://github.com/Litengzheng/vuldb_new2/blob/main/A8000RU/vul_354/README.md
https://vuldb.com/submit/813906
https://vuldb.com/vuln/365414
https://vuldb.com/vuln/365414/cti
https://www.totolink.net
https://github.com/advisories/GHSA-h6vr-9r9p-c6rf