CVE-2026-31164

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the pppoeMtu parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31176

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the stunuser parameter to /cgi-bin/cstecgi.cgi...

PT-2026-34705

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557 B20221024 allowing attackers to execute arbitrary commands via the informEnable parameter to /cgi-bin/cstecgi.cgi...

PT-2026-34677

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557 B20221024 allowing attackers to execute arbitrary commands via the stun-port parameter to /cgi-bin/cstecgi.cgi...

PT-2026-34713

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557 B20221024 allowing attackers to execute arbitrary commands via the hour parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31171

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the url parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31176: Improper Neutralization of Special Elements used in a Command

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the stunuser parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31173

A command injection vulnerability exists in the ToToLink A3300R wireless router, specifically affecting firmware version v17.0.0cu.557_B20221024 . The root cause is the improper handling of the interval parameter within the /cgi-bin/cstecgi.cgi file, which allows an attacker to execute arbitrary ...

PT-2026-34717

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557 B20221024 allowing attackers to execute arbitrary commands via the interval parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31177

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the stunMinAlive parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31177

The ToToLink A3300R wireless router is vulnerable to a command injection flaw in the stunMinAlive parameter at the /cgi-bin/cstecgi.cgi endpoint. This vulnerability exists because the firmware fails to properly handle the input parameter, allowing an attacker to execute arbitrary commands on the ...

CVE-2026-31168

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the recHour parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31163

The ToToLink A3300R wireless router is vulnerable to a command injection flaw in its v17.0.0cu.557_B20221024 firmware. An unauthenticated attacker can execute arbitrary commands by sending a specially crafted request to the /cgi-bin/cstecgi.cgi endpoint, specifically by exploiting the dhcpMtu par...

CVE-2026-31175

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the stunEnable parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-31162

The ToToLink A3300R wireless router is vulnerable to a command injection flaw in its firmware version v17.0.0cu.557_B20221024 . The vulnerability exists in the ttlWay parameter of the /cgi-bin/cstecgi.cgi endpoint, where an attacker can execute arbitrary commands by sending malicious data. While ...

CVE-2026-31174

The ToToLink A3300R wireless router is vulnerable to a command injection flaw in its v17.0.0cu.557_B20221024 firmware. The root cause is the cstecgi.cgi file failing to properly validate the informEnable parameter. An attacker can exploit this lack of sanitization to execute arbitrary commands vi...

SATO CL4NX Printers Incorrect Authorization (CVE-2023-23594)

An authentication bypass vulnerability in the web client interface for the CL4NX printer before firmware version 1.13.3-u724r2 provides remote unauthenticated attackers with access to execute commands intended only for valid/authenticated users, such as file uploads and configuration changes. Thi...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

No d...

CVE-2026-6862

A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each node's Length field is at least 4 bytes, which is the minimum size for an EFI Extensible Firmware Interface device path node header. A local user could exploit this...

CVE-2026-6862

A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each node's Length field is at least 4 bytes, which is the minimum size for an EFI Extensible Firmware Interface device path node header. A local user could exploit this...