Report: Ultimate Guide: CVE-2026-5101 - Totolink A3300R Parameter cstecgi.cgi setLanCfg command injection

Report: Ultimate Guide: CVE-2026-5101 - Totolink A3300R Parameter cstecgi.cgi setLanCfg command injection

CVE ID :CVE-2026-5101 Published : March 29, 2026, 11:16 p.m. | 1 hour, 46 minutes ago Description :A vulnerability was identified in Totolink A3300R 17.0.0cu.557_b20221024. This affects the function setLanCfg of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. The manipulation of the argument lanIp leads to command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
March 29, 2026
Impact: command injection