Description
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the provider parameter to /cgi-bin/cstecgi.cgi.
Medium · 6.5
CVE-2026-31160
EUVD-2026-25241GHSA-m5m9-mf97-g3hf
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the provid…
Published Apr 23, 2026 · Updated Apr 23, 2026 · Assigned by mitre