TOTOLINK A7100RU

Published Atomicorp research notes for CVEs affecting TOTOLINK A7100RU where WAF protections were observed during testing or engineering review.

These notes are not intended to represent the full set of vulnerabilities mitigated by Atomicorp products and should not be interpreted as a coverage matrix, certification list, or census of protected CVEs.

Atomicorp WAF protections are primarily designed around attack techniques and exploit behaviors rather than individual vulnerability identifiers. A published research note documents a positive research finding related to that CVE. If a CVE is absent from these notes, no conclusion should be drawn about protection status.

CVEVulnerabilityCVSSSeverityRules Observed
CVE-2026-5850Totolink A7100RU CGI cstecgi.cgi setVpnPassCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5851Totolink A7100RU CGI cstecgi.cgi setUPnPCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5852Totolink A7100RU CGI cstecgi.cgi setIptvCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5853Totolink A7100RU CGI cstecgi.cgi setIpv6LanCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5854Totolink A7100RU CGI cstecgi.cgi setWiFiEasyCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5975Totolink A7100RU CGI cstecgi.cgi setDmzCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5976Totolink A7100RU CGI cstecgi.cgi setStorageCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5977Totolink A7100RU CGI cstecgi.cgi setWiFiBasicCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5978Totolink A7100RU CGI cstecgi.cgi setWiFiAclRules os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5993Totolink A7100RU CGI cstecgi.cgi setWiFiGuestCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5994Totolink A7100RU CGI cstecgi.cgi setTelnetCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5996Totolink A7100RU CGI cstecgi.cgi setAdvancedInfoShow os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5997Totolink A7100RU CGI cstecgi.cgi setLoginPasswordCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-6025Totolink A7100RU CGI cstecgi.cgi setSyslogCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-6026Totolink A7100RU CGI cstecgi.cgi setPortalConfWeChat os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-6028Totolink A7100RU CGI cstecgi.cgi setPptpServerCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-6029Totolink A7100RU CGI cstecgi.cgi setVpnAccountCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-6112Totolink A7100RU CGI cstecgi.cgi setRadvdCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-6113Totolink A7100RU CGI cstecgi.cgi setTtyServiceCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-6114Totolink A7100RU CGI cstecgi.cgi setNetworkCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-6115Totolink A7100RU CGI cstecgi.cgi setAppCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-6116Totolink A7100RU CGI cstecgi.cgi setDiagnosisCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-6131Totolink A7100RU CGI cstecgi.cgi setTracerouteCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 390904 , 393655
CVE-2026-6132Totolink A7100RU CGI cstecgi.cgi setLedCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-6138Totolink A7100RU CGI cstecgi.cgi setAccessDeviceCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-6139Totolink A7100RU CGI cstecgi.cgi UploadOpenVpnCert os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-6140Totolink A7100RU CGI cstecgi.cgi UploadFirmwareFile os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-6154Totolink A7100RU CGI cstecgi.cgi setWizardCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-6155Totolink A7100RU CGI cstecgi.cgi setWanCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-6156Totolink A7100RU CGI cstecgi.cgi setIpQosRules os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-6195Totolink A7100RU CGI cstecgi.cgi setPasswordCfg os command injection8.9 (v4.0)High340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5677Totolink A7100RU cstecgi.cgi CsteSystem os command injection5.5 (v4.0)Medium340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5678Totolink A7100RU cstecgi.cgi setScheduleCfg os command injection5.5 (v4.0)Medium340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5688Totolink A7100RU cstecgi.cgi setDdnsCfg os command injection5.5 (v4.0)Medium340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5689Totolink A7100RU cstecgi.cgi setNtpCfg os command injection5.5 (v4.0)Medium340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5690Totolink A7100RU cstecgi.cgi setRemoteCfg os command injection5.5 (v4.0)Medium340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5691Totolink A7100RU cstecgi.cgi setFirewallType os command injection5.5 (v4.0)Medium340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-5692Totolink A7100RU cstecgi.cgi setGameSpeedCfg os command injection5.5 (v4.0)Medium340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655