CVE-2026-6139

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 13, 2026

Last Seen

April 13, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Command Injection Vulnerability in Totolink A7100RU (CVE-2026-6138)75.0

A critical vulnerability, CVE-2026-6138, has been identified in the Totolink A7100RU firmware version 7.4cu.2313_b20191024. This flaw allows unauthenticated remote attackers to execute arbitrary OS commands via command injection through the setAccessDeviceCfg function in the CGI Handler component. T...