CVE-2026-6138 - Vulnerability Details

Related Threat Clusters

• Critical Command Injection Vulnerability in Totolink A7100RU (CVE-2026-6138)

  A critical vulnerability, CVE-2026-6138, has been identified in the Totolink A7100RU firmware version 7.4cu.2313_b20191024. This flaw allows unauthenticated remote attackers to execute arbitrary OS commands via command…

  8 articles · Updated April 13, 2026
• New Vulnerabilities CVE-2026-6121 and CVE-2026-35668 Discovered

  On April 12, 2026, INCIBE-CERT published details on CVE-2026-6121, a high-severity vulnerability with a CVSS score of 8.80, allowing remote exploitation with low complexity and no user interaction required. This…

  5 articles · Updated April 12, 2026

Recent Intelligence Reports

• Report: CVE-2026-6138 - Totolink A7100RU CGI cstecgi.cgi setAccessDeviceCfg os command injection InfinitSec - Cyber Tech Crypto Gaming News / 2h Severity: 10.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more... Impact: command injection — infinitsec.net · April 13, 2026
• CVE-2026-6138 TheHackerWire / 2h Attack Vector How the vulnerability can be exploited Network Scope Impact beyond vulnerable component Unchanged — www.thehackerwire.com · April 13, 2026
• CVE-2026-6138 INCIBE-CERT - Vulnerabilities RSS / 2h Gravedad 3.1 (CVSS 3.1 Base Score) Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score) — www.incibe.es · April 13, 2026
• CVE-2026-6138 - Exploits & Severity — Feedly · April 13, 2026

Related Entities