A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setOpenVpnCertGenerationCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Executing a manipulation of the argument servername can lead to os command injection. The attack may be launched remotely. The exploit has been published and may be used.
[POC] CVE-2026-94545 — CVE-2026-94545
Next.js RCE
[POC] CVE-2026-94545 — CVE-2026-94545
Next.js next/og unauthenticated RCE (CVE-2026-94545) - PoC
[POC] CVE-2026-94545 — CVE-2026-94545-nextjs-og-poc
CVE-2026-94545 / GHSA-vcvr-r3jv-pc5j — Next.js next/og ImageResponse SVG injection (Satori, GHSA-wx4j-mvgx-mqwp): isolated Docker validation lab with vulnerable (16.3.5) vs patched (16.3.6) controls, non-destructive Python scanner with pixel-level PNG evidence, and root-cause analysis of the upstream Satori fix. Authorized security research only.
[POC] CVE-2026-94545 — CVE-2026-94545
CVE-2026-94545 - Draft or TODO
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free