{"vulnerability": "cve-2026-9434", "sightings": [{"uuid": "b89687cd-0c80-4e05-a537-07b3ab5645b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9434", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116634040801870107", "content": "Totolink A8000RU (v7.1cu.643_b20200521) hit by CRITICAL OS command injection (CVE-2026-9434). Remote unauthenticated attackers may gain full control. No fix yet \u2014 restrict management access &amp; monitor for updates. https://radar.offseq.com/threat/cve-2026-9434-os-command-injection-in-totolink-a80-c89a76b9 #OffSeq #Vulnerability #Router", "creation_timestamp": "2026-05-25T07:30:26.882585Z"}, {"uuid": "50737419-f11b-4787-9d46-8731aa0f26ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9434", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmnxh5ydco2l", "content": "Totolink A8000RU routers face CRITICAL OS command injection (v7.1cu.643_b20200521). No patch yet \u2014 restrict admin access &amp; watch for updates. Full compromise risk! https://radar.offseq.com/threat/cve-2026-9434-os-command-injection-in-totolink-a80-c89a76b9 #OffSeq #IoTSecurity", "creation_timestamp": "2026-05-25T07:30:29.004562Z"}, {"uuid": "43f94cee-54fe-4c43-9dcd-53468586b188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9434", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motxyqaont2n", "content": "\ud83d\udea8  ALERT: CVE-2026-9434\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setWiFiWpsCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument wscDisabled lea", "creation_timestamp": "2026-06-22T03:46:39.420704Z"}]}