{"cvss":0.0,"datePublished":"2026-09-01T00:00:00Z","dateUpdated":"2026-09-01T00:00:00Z","description":"A vulnerability was detected in Totolink A7000R 4.1cu.4154. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument plugin_name results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.","dueDate":"","id":"CVE-2026-1547","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"a7000r_firmware","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"TOTOLINK a7000r_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component","vendor":"TOTOLINK"}