Is this vulnerability remotely exploitable beyond the local network?

It can be, depending on configuration. If the router's management interface is exposed to the internet or reachable via port forwarding or remote management, attackers on the internet may be able to exploit it. Otherwise, exploitation is typically limited to actors with access to the local or adjacent network.

Does an attacker need valid credentials to exploit this issue?

The core weakness is in the handling of the setUssd parameter; whether credentials are required depends on how the specific endpoint is protected in the deployed configuration. However, once an attacker can send crafted requests to the vulnerable handler, the flaw itself does not inherently require elevated privileges.

What is the safest general fix pattern for this type of vulnerability?

The most robust approach is to remove direct shell command invocation from CGI logic entirely, replacing it with parameterized system APIs that accept structured arguments rather than command strings. Alongside that, apply strict whitelist validation to all parameters and centralize command-related operations behind a hardened abstraction layer.

Severity:

HIGH RISK

(8.8)

OS Command Injection (CWE-77) via setUssd Parameter in Totolink NR1800X /cgi-bin/cstecgi.cgi

CVE-2026-7548

Published:

Apr 30, 2026

Status:

Deferred

Summary

Affected Context

Exploit Preconditions

Why This Happens

Potential Impact

General Mitigation Guidance

How Teams Detect Issues Like This

Frequently Asked Questions

Source

NDV

Recent Vulnerabilities

CWE-284;CWE-434

HIGH RISK

HIGH

(7.3)

Unrestricted File Upload (CWE-434) via Engine Handler exec in MindsDB BYOM Integration

Remote Code Execution and Arbitrary File Upload

May 3, 2026

CWE-287

HIGH RISK

HIGH

(7.3)

Improper Authentication (CWE-287) in JwtAuthenticationTokenFilter of yudao-cloud Ruoyi-Vue-Pro

Authentication Bypass / Unauthorized Access

May 3, 2026

Vulnerability Type

Category:

OS Command Injection

CWE:

CWE-74;CWE-77

Impact:

Remote Code Execution on Router Firmware

Severity:

HIGH RISK

(8.8)

CVSS Version:

3.1

Vulnerability Type

Category:

OS Command Injection

CWE:

CWE-74;CWE-77

Impact:

Remote Code Execution on Router Firmware

Severity:

HIGH RISK

(8.8)

CVSS Version:

3.1

Catch This CVE While Code Is Being Written

Detect vulnerable code directly in pull requests, so CVEs are fixed before merge.

Get Started

Ship clean & secure code faster

START 14 DAYS FREE TRIAL

BOOK A DEMO

Made with Love in San Francisco

355 Bryant St. San Francisco, CA 94107, USA

Ask AI for summary of CodeAnt

Made with Love in San Francisco

355 Bryant St. San Francisco, CA 94107, USA

Ask AI for summary of CodeAnt

Made with Love in San Francisco

355 Bryant St. San Francisco, CA 94107, USA

Ask AI for summary of CodeAnt

OS Command Injection (CWE-77) via setUssd Parameter in Totolink NR1800X /cgi-bin/cstecgi.cgi

Summary

Affected Context

Exploit Preconditions

Why This Happens

Potential Impact

General Mitigation Guidance

How Teams Detect Issues Like This

Frequently Asked Questions

Source

Recent Vulnerabilities

HIGH RISK

HIGH

(7.3)

Unrestricted File Upload (CWE-434) via Engine Handler exec in MindsDB BYOM Integration

HIGH RISK

HIGH

(7.3)

Improper Authentication (CWE-287) in JwtAuthenticationTokenFilter of yudao-cloud Ruoyi-Vue-Pro

Vulnerability Type

Vulnerability Type

Vulnerability Type

Catch This CVE While Code Is Being Written

Ship clean & secure code faster

Product

Pricing

Company

Legal

Developers

Compare

Product

Pricing

Company

Legal

Developers

Compare

Product

Pricing

Company

Legal

Developers

Compare