CVE-2026-31179

A command injection vulnerability exists in the ToToLink A3300R wireless router running firmware v17.0.0cu.557_B20221024 . The flaw originates from the /cgi-bin/cstecgi.cgi endpoint, where the stunPort (or stun-port ) parameter fails to properly validate user input. An unauthenticated attacker ca...

CVE-2026-31159

A command injection vulnerability exists in the ToToLink A3300R wireless router, specifically affecting firmware v17.0.0cu.557_B20221024 . The flaw occurs because the password parameter to the /cgi-bin/cstecgi.cgi endpoint does not properly neutralize special elements used in commands. An unauthe...

CVE-2026-31176

A command injection vulnerability exists in the ToToLink A3300R wireless router running firmware v17.0.0cu.557_B20221024 . The flaw originates from a failure to properly validate user input within the stun_user parameter of the /cgi-bin/cstecgi.cgi file. An attacker can exploit this oversight to ...

CVE-2026-31164

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the pppoeMtu parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31160

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the provider parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31165

The ToToLink A3300R wireless router is vulnerable to a command injection flaw in its v17.0.0cu.557_B20221024 firmware. The root cause is the cstecgi.cgi file's failure to properly validate the pppoeServiceName parameter. An attacker can exploit this to execute arbitrary commands on the device. Ex...

CVE-2026-31164

The ToToLink A3300R wireless router is vulnerable to a command injection vulnerability in firmware version v17.0.0cu.557_B20221024 . The flaw exists because the firmware fails to properly validate user input for the pppoeMtu parameter located at the /cgi-bin/cstecgi.cgi endpoint. An attacker can ...

CVE-2026-31174

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the informEnable parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31175

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the stunEnable parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31171

The ToToLink A3300R router, running firmware v17.0.0cu.557_B20221024 , is vulnerable to a command injection flaw. The root cause is the failure to properly validate input for the url parameter within the /cgi-bin/cstecgi.cgi endpoint. An attacker can exploit this by sending a specially crafted re...

CVE-2026-31179

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the stunPort parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31176

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the stunuser parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31173

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the interval parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31167

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the mode parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31163

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the dhcpMtu parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31169

The ToToLink A3300R wireless router is vulnerable to a command injection flaw in firmware version v17.0.0cu.557_B20221024 . The vulnerability exists because the /cgi-bin/cstecgi.cgi endpoint fails to properly sanitize user input provided via the week parameter. An unauthenticated attacker can exp...

CVE-2026-31181

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the stunServerAddr parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31164

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the pppoeMtu parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31168

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the recHour parameter to /cgi-bin/cstecgi.cgi...

PT-2026-34714

Name of the Vulnerable Software and Affected Versions ToToLink A3300R version 17.0.0cu.557 B20221024 Description An issue allows attackers to execute arbitrary commands via the mode parameter to the '/cgi-bin/cstecgi.cgi' endpoint. Recommendations At the moment, there is no information about a...