CVE-2026-5676: Totolink a8000r

High severity, CVSS 7.3. EPSS: 0.7% chance of exploitation in the next 30 days.

A vulnerability was identified in Totolink A8000R 5.9c.681_B20180413. This issue affects the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument langType leads to missing authentication. The attack can be launched remotely. The exploit is publicly available and might be used.

Affected products

• Totolink a8000r: version 5.9c.681_B20180413 only

Published 2026-04-06. Last modified 2026-07-24.