Description
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun-pass parameter to /cgi-bin/cstecgi.cgi.
Critical · 9.8
CVE-2026-31170
EUVD-2026-21016GHSA-cmwm-73hq-3hhx
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun-p…
Published Apr 9, 2026 · Updated Apr 14, 2026 · Assigned by mitre