{"id":"CVE-2026-9532","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-9532","generatedAt":"2026-10-31T04:55:17.738Z","title":"A security vulnerability has been detected in Totolink CA750-PoE 6.2c.510.","description":"A security vulnerability has been detected in Totolink CA750-PoE 6.2c.510. The affected element is the function setUploadUserData of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Such manipulation of the argument FileName leads to os command injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.","published":"2026-05-26T07:16:20.000Z","lastModified":"2026-07-23T11:10:00.000Z","status":"Deferred","sourceIdentifier":"cna@vuldb.com","cvss":{"version":"4.0","score":2.1,"severity":"LOW","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-77","CWE-78"],"affected":[],"epss":{"score":0.10375,"percentile":0.95718,"date":"2026-10-30","history":[{"date":"2026-09-24","score":0.01768,"percentile":0.77113},{"date":"2026-10-25","score":0.10375,"percentile":0.9569}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 10.4%, higher than 96% of all known CVEs. Patch or mitigate before the next change window."},"changes":[{"kind":"epss","label":"EPSS jump","at":"2026-10-25T00:00:00.000Z","detail":{"to":0.10375,"from":0.01768,"percentile":0.9569},"summary":"EPSS moved from 1.8% to 10.4% probability of exploitation in the next thirty days."}],"references":[{"url":"https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_55/55.md","source":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/813930","source":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/365559","source":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/365559/cti","source":"cna@vuldb.com"},{"url":"https://www.totolink.net/","source":"cna@vuldb.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-9532","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}