VULNERABILITY INTELLIGENCE

CVE-2026-31176

CVSS score6.5 MEDIUM

EPSS probability0.28%

CISA KEVNot currently listed

Published2026-04-23

Last modified2026-06-17

Description

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun_user parameter to /cgi-bin/cstecgi.cgi.