What is GHSA-x42p-x8wg-p438?

GHSA-x42p-x8wg-p438 is a security advisory published by GitHub Security Advisories with Low severity. A weakness has been identified in Totolink CA750-PoE 6.2c.510. Impacted is the function...

Which CVE IDs does GHSA-x42p-x8wg-p438 cover?

GHSA-x42p-x8wg-p438 covers the following CVE IDs: CVE-2026-9531. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-x42p-x8wg-p438?

GHSA-x42p-x8wg-p438 has a CVSS v3 base score of 6.3, published by GitHub Security Advisories.

GHSA-x42p-x8wg-p438LowCVSS 6.3

A weakness has been identified in Totolink CA750-PoE 6.2c.510. Impacted is the function...

Vendor

GitHub Security Advisories

Published

May 26, 2026

Last Modified

May 26, 2026

🔗 CVE IDs covered (1)

CVE-2026-9531 →

📋 Description

A weakness has been identified in Totolink CA750-PoE 6.2c.510. Impacted is the function setUpgradeUboot of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. This manipulation of the argument FileName causes os command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2026-9531
https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_54/54.md
https://vuldb.com/submit/813929
https://vuldb.com/vuln/365558
https://vuldb.com/vuln/365558/cti
https://www.totolink.net
https://github.com/advisories/GHSA-x42p-x8wg-p438