CVE-2026-31167

The ToToLink A3300R wireless router (firmware v17.0.0cu.557_B20221024 ) is vulnerable to a command injection flaw. The root cause is the failure to properly filter the mode parameter in the /cgi-bin/cstecgi.cgi endpoint. An attacker can exploit this lack of sanitization to execute arbitrary comma...

CVE-2025-60688

A stack buffer overflow vulnerability exists in the cstecgi.cgi binary (specifically the setDefResponse function) of the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) router firmware. The root cause is the use of strcpy() to copy the "IpAddress" parameter from a ...

The vulnerability of the setRebootScheCfg() function (/cgi-bin/cstecgi.cgi) in the TOTOlink EX1800T Wi-Fi extension software allows a intruder to execute arbitrary commands.

The vulnerability of the setRebootScheCfg function /cgi-bin/cstecgi.cgi of the TOTOlink EX1800T Wi-Fi extension software is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability could allow a remote attacker to...