https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-31173.htmlhttps://patchthecve.com/cve/CVE-2026-31173.htmlWed, 17 Jun 2026 10:33:24 +0000MEDIUM 6.5: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the interval parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31169.htmlhttps://patchthecve.com/cve/CVE-2026-31169.htmlWed, 17 Jun 2026 10:33:23 +0000MEDIUM 6.5: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the week parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31168.htmlhttps://patchthecve.com/cve/CVE-2026-31168.htmlWed, 17 Jun 2026 10:33:23 +0000MEDIUM 6.5: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the recHour parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31167.htmlhttps://patchthecve.com/cve/CVE-2026-31167.htmlWed, 17 Jun 2026 10:33:23 +0000MEDIUM 6.5: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the mode parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31166.htmlhttps://patchthecve.com/cve/CVE-2026-31166.htmlWed, 17 Jun 2026 10:33:23 +0000MEDIUM 6.5: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the hour parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31163.htmlhttps://patchthecve.com/cve/CVE-2026-31163.htmlWed, 17 Jun 2026 10:33:22 +0000MEDIUM 6.5: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the dhcpMtu parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31162.htmlhttps://patchthecve.com/cve/CVE-2026-31162.htmlWed, 17 Jun 2026 10:33:22 +0000MEDIUM 6.5: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the ttlWay parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31181.htmlhttps://patchthecve.com/cve/CVE-2026-31181.htmlWed, 17 Jun 2026 10:33:25 +0000CRITICAL 9.8: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunServerAddr parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31179.htmlhttps://patchthecve.com/cve/CVE-2026-31179.htmlWed, 17 Jun 2026 10:33:25 +0000MEDIUM 6.5: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunPort parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31178.htmlhttps://patchthecve.com/cve/CVE-2026-31178.htmlWed, 17 Jun 2026 10:33:25 +0000CRITICAL 9.8: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMaxAlive parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31177.htmlhttps://patchthecve.com/cve/CVE-2026-31177.htmlWed, 17 Jun 2026 10:33:25 +0000CRITICAL 9.8: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMinAlive parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31176.htmlhttps://patchthecve.com/cve/CVE-2026-31176.htmlWed, 17 Jun 2026 10:33:24 +0000MEDIUM 6.5: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun_user parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31175.htmlhttps://patchthecve.com/cve/CVE-2026-31175.htmlWed, 17 Jun 2026 10:33:24 +0000CRITICAL 9.8: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunEnable parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31174.htmlhttps://patchthecve.com/cve/CVE-2026-31174.htmlWed, 17 Jun 2026 10:33:24 +0000MEDIUM 6.5: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the informEnable parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31172.htmlhttps://patchthecve.com/cve/CVE-2026-31172.htmlWed, 17 Jun 2026 10:33:24 +0000MEDIUM 6.5: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the user parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31171.htmlhttps://patchthecve.com/cve/CVE-2026-31171.htmlWed, 17 Jun 2026 10:33:24 +0000MEDIUM 6.5: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the url parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31165.htmlhttps://patchthecve.com/cve/CVE-2026-31165.htmlWed, 17 Jun 2026 10:33:23 +0000MEDIUM 6.5: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeServiceName parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31164.htmlhttps://patchthecve.com/cve/CVE-2026-31164.htmlWed, 17 Jun 2026 10:33:23 +0000MEDIUM 6.5: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeMtu parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31160.htmlhttps://patchthecve.com/cve/CVE-2026-31160.htmlWed, 17 Jun 2026 10:33:22 +0000MEDIUM 6.5: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the provider parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31159.htmlhttps://patchthecve.com/cve/CVE-2026-31159.htmlWed, 17 Jun 2026 10:33:22 +0000MEDIUM 6.5: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the password parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-31170.htmlhttps://patchthecve.com/cve/CVE-2026-31170.htmlWed, 17 Jun 2026 10:33:23 +0000CRITICAL 9.8: An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun-pass parameter to /cgi-bin/cstecgi.cgi.https://patchthecve.com/cve/CVE-2026-5105.htmlhttps://patchthecve.com/cve/CVE-2026-5105.htmlWed, 17 Jun 2026 10:58:26 +0000MEDIUM 6.3: A vulnerability was detected in Totolink A3300R 17.0.0cu.557_b20221024. The affected element is the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. Performing a manipulation of the argument pptpPassThru results in command injection. It is possible to initihttps://patchthecve.com/cve/CVE-2026-5104.htmlhttps://patchthecve.com/cve/CVE-2026-5104.htmlWed, 17 Jun 2026 10:58:26 +0000MEDIUM 6.3: A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Impacted is the function setStaticRoute of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument ip leads to command injection. The attack may be performed from remote. The exploit has been disclosed pubhttps://patchthecve.com/cve/CVE-2026-5103.htmlhttps://patchthecve.com/cve/CVE-2026-5103.htmlWed, 17 Jun 2026 10:58:26 +0000MEDIUM 6.3: A weakness has been identified in Totolink A3300R 17.0.0cu.557_b20221024. This issue affects the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument enable causes command injection. The attack is possible to be carried out remotely. The exploit has been made availhttps://patchthecve.com/cve/CVE-2026-5102.htmlhttps://patchthecve.com/cve/CVE-2026-5102.htmlWed, 17 Jun 2026 10:58:26 +0000MEDIUM 6.3: A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. This vulnerability affects the function setSmartQosCfg of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. The manipulation of the argument qos_up_bw results in command injection. The attack can be executhttps://patchthecve.com/cve/CVE-2026-5101.htmlhttps://patchthecve.com/cve/CVE-2026-5101.htmlWed, 17 Jun 2026 10:58:26 +0000MEDIUM 6.3: A vulnerability was identified in Totolink A3300R 17.0.0cu.557_b20221024. This affects the function setLanCfg of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. The manipulation of the argument lanIp leads to command injection. Remote exploitation of the attack is possible. The exp