Login Request a demo
High severity · published Mar 30, 2026
CVE-2026-5103
Totolink A3300R cstecgi.cgi setUPnPCfg command injection
8.8
CVSS
4.1%
EPSS
No
On KEV
Description
A weakness has been identified in Totolink A3300R 17.0.0cu.557_b20221024. This issue affects the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument enable causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.1% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
A3
A3300R · Totolink
17.0.0cu.557_b20221024 · source: vendor
AF
A3300r Firmware · Totolink
17.0.0cu.557_b20221024 · source: NVD
Affected product
A3
A3300R
Totolink
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-5103
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-5103
Exploit
https://github.com/LvHongW/Vuln-of-totolink_A3300R/tree/main/A3300R_enable_cmd_inject
Permissions Required
https://vuldb.com/submit/779140
Third Party Advisory
https://vuldb.com/vuln/354128
Third Party Advisory
https://vuldb.com/vuln/354128/cti
Product
https://www.totolink.net/
More from A3300R
9.8
CVE-2026-31177
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMinAlive parameter to /cgi-bin/cstecgi.cgi
9.8
CVE-2026-31178
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMaxAlive parameter to /cgi-bin/cstecgi.cgi
9.8
CVE-2026-31181
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunServerAddr parameter to…
9.8
CVE-2026-31175
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunEnable parameter to /cgi-bin/cstecgi.cgi
9.8
CVE-2026-31170
An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun-pass parameter to /cgi-bin/cstecgi.cgi