HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-5104 — A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b2022...

Monday, March 30, 2026 at 03:15 AM UTC·Source: NIST NVD

Updated: Monday, April 6, 2026 at 12:17 AM UTC

Executive Summary

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Impacted is the function setStaticRoute of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument ip leads to command injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Analysis

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Impacted is the function setStaticRoute of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument ip leads to command injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. CVSS Score: 6.3. Published: 2026-03-30T03:15:58.187.

Indicators of Compromise (1)

CVE (1)
CVE-2026-5104
Source Attribution

Originally published by NIST NVD on Mar 30, 2026. Verified by: NIST.

Related Threats