Description
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunServerAddr parameter to /cgi-bin/cstecgi.cgi.
Critical · 9.8
CVE-2026-31181
EUVD-2026-25248GHSA-gr6m-gpr8-xrmv
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunSe…
Published Apr 23, 2026 · Updated Apr 23, 2026 · Assigned by mitre